type=DAEMON_START msg=audit(1760165090.634:7872): op=start ver=3.0.7 format=enriched kernel=5.14.0-284.11.1.el9_2.x86_64 auid=4294967295 pid=726 uid=0 ses=4294967295 subj=system_u:system_r:auditd_t:s0 res=successAUID="unset" UID="root"
type=SERVICE_START msg=audit(1760165090.639:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165090.655:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpcbind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CONFIG_CHANGE msg=audit(1760165090.693:7): op=set audit_backlog_limit=8192 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1760165090.693:7): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7fff53101a10 a2=3c a3=0 items=0 ppid=731 pid=741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760165090.693:7): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1760165090.694:8): op=set audit_failure=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1760165090.694:8): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7fff53101a10 a2=3c a3=0 items=0 ppid=731 pid=741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760165090.694:8): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1760165090.694:9): op=set audit_backlog_wait_time=60000 old=60000 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1760165090.694:9): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7fff53101a10 a2=3c a3=0 items=0 ppid=731 pid=741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760165090.694:9): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=SERVICE_START msg=audit(1760165090.697:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_BOOT msg=audit(1760165090.708:11): pid=748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165090.714:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165090.899:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165090.922:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760165090.951:15): prog-id=18 op=LOAD
type=SERVICE_START msg=audit(1760165090.996:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-broker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760165091.000:17): prog-id=19 op=LOAD
type=SERVICE_START msg=audit(1760165091.013:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760165091.025:19): prog-id=20 op=LOAD
type=BPF msg=audit(1760165091.026:20): prog-id=21 op=LOAD
type=BPF msg=audit(1760165091.026:21): prog-id=22 op=LOAD
type=SERVICE_START msg=audit(1760165091.034:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dracut-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165091.037:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165091.086:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165091.101:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760165091.877:26): prog-id=23 op=LOAD
type=BPF msg=audit(1760165091.877:27): prog-id=24 op=LOAD
type=SERVICE_START msg=audit(1760165091.950:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165092.069:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165092.134:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165092.154:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rhsmcertd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165092.160:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gssproxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165092.200:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165092.226:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165092.659:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165092.770:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=polkit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ADD_GROUP msg=audit(1760165094.812:37): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-group acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ADD_USER msg=audit(1760165094.816:38): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1760165094.816:39): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="adm" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1760165094.816:40): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="systemd-journal" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1760165094.816:41): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="adm" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1760165094.816:42): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="systemd-journal" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1760165094.919:43): pid=1119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-home-dir id=1001 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="cloud-user"
type=ACCT_LOCK msg=audit(1760165094.955:44): pid=1126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:passwd_t:s0 msg='op=locked-password id=1001 exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="cloud-user"
type=SERVICE_START msg=audit(1760165095.547:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165095.579:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpc-statd-notify comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165095.587:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165095.592:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165095.596:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165095.599:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=serial-getty@ttyS0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165095.603:51): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1760165095.615:52): pid=1143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1147 suid=74 rport=51654 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760165095.616:53): pid=1143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1147 suid=74 rport=51654 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SYSTEM_RUNLEVEL msg=audit(1760165095.621:54): pid=1146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165095.625:55): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760165095.625:56): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1760165095.646:57): pid=1151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1760165095.671:58): pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1173 suid=74 rport=51684 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760165095.672:59): pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1173 suid=74 rport=51684 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1760165095.677:60): pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1173 suid=74 rport=51684 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1760165095.678:61): pid=1167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1760165095.694:62): pid=1177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1760165095.719:63): pid=1189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760165095.719:64): pid=1143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1147 suid=74 rport=51654 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1760165095.721:65): pid=1143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1760165095.744:66): pid=1200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1205 suid=74 rport=51714 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760165095.744:67): pid=1200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1205 suid=74 rport=51714 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760165095.776:68): pid=1214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1226 suid=74 rport=51716 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760165095.776:69): pid=1214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1226 suid=74 rport=51716 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760165095.811:70): pid=1235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1250 suid=74 rport=51728 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760165095.811:71): pid=1235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1250 suid=74 rport=51728 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1760165095.815:72): pid=1235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1760165095.840:73): pid=1257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760165095.859:74): pid=1200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1205 suid=74 rport=51714 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1760165095.860:75): pid=1200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760165095.887:76): pid=1214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1226 suid=74 rport=51716 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1760165095.888:77): pid=1214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165095.925:78): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165096.506:79): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760165102.325:80): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165105.785:81): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kdump comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760165122.180:82): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760165122.218:83): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760165122.218:84): prog-id=0 op=UNLOAD
type=CRYPTO_SESSION msg=audit(1760165130.332:85): pid=4176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=4177 suid=74 rport=35428 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760165130.332:86): pid=4176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=4177 suid=74 rport=35428 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1760165130.402:87): pid=4176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760165130.402:88): pid=4176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ce:1b:37:32:25:b4:26:1c:73:72:46:1c:30:74:04:4b:c4:8c:60:78:f5:88:67:28:9a:7c:b3:99:b8:b0:a2:bf exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1760165130.434:89): pid=4176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760165130.435:90): pid=4176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4177 suid=74 rport=35428 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1760165130.438:91): pid=4176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1760165130.438:92): pid=4176 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=1 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1760165130.438:92): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcfe2ef7c0 a2=4 a3=3e8 items=0 ppid=1133 pid=4176 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760165130.438:92): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1760165130.440:93): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1760165130.480:94): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1760165130.513:95): pid=4180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1760165130.513:96): pid=4180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1760165130.515:97): pid=4180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1760165130.516:98): pid=4180 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=2 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1760165130.516:98): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffc0c54b980 a2=4 a3=3e8 items=0 ppid=1 pid=4180 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760165130.516:98): proctitle="(systemd)"
type=USER_START msg=audit(1760165130.518:99): pid=4180 uid=0 auid=1000 ses=2 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1760165130.656:100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1760165130.666:101): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1760165130.670:102): pid=4190 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1760165130.715:103): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165130.715:104): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165130.752:105): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165130.752:106): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165130.763:107): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165130.763:108): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165130.849:109): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165130.849:110): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165130.867:111): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165130.867:112): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165131.231:113): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165131.231:114): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165140.599:115): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165140.600:116): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165141.310:117): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165141.310:118): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165147.729:119): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165147.729:120): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165148.106:121): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165148.106:122): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165149.009:123): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165149.009:124): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165149.229:125): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165149.229:126): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165151.744:127): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165151.744:128): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165151.999:129): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165151.999:130): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165152.436:131): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165152.436:132): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165152.650:133): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165152.650:134): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165153.537:135): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165153.537:136): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165153.570:137): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165153.570:138): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165153.581:139): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165153.582:140): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165153.621:141): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165153.621:142): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165153.634:143): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165153.634:144): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165153.663:145): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165153.663:146): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165153.673:147): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165153.673:148): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165153.864:149): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165153.865:150): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165153.882:151): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165153.882:152): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165153.915:153): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165153.915:154): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165153.929:155): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165153.929:156): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165153.958:157): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165153.958:158): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165153.969:159): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165153.969:160): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165154.135:161): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165154.135:162): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165154.165:163): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165154.165:164): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165154.195:165): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165154.195:166): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165155.212:167): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165155.212:168): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165155.245:169): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165155.245:170): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165155.254:171): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165155.254:172): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165155.293:173): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165155.293:174): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165155.307:175): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165155.307:176): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165155.338:177): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165155.338:178): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165155.347:179): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165155.347:180): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165155.549:181): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165155.549:182): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165155.567:183): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165155.567:184): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165155.605:185): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165155.605:186): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165155.621:187): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165155.621:188): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165155.653:189): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165155.653:190): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165155.668:191): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165155.668:192): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165155.874:193): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165155.874:194): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165155.888:195): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165155.888:196): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165155.923:197): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165155.923:198): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165157.613:199): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165157.613:200): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165157.808:201): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165157.808:202): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165159.880:203): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165159.880:204): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165161.590:205): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165161.590:206): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165163.738:207): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165163.738:208): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165163.981:209): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165163.981:210): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165166.117:211): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165166.117:212): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165166.329:213): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165166.329:214): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165166.366:215): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165166.366:216): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165166.579:217): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165166.579:218): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165166.616:219): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165166.616:220): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165166.780:221): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165166.780:222): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165167.747:223): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165167.747:224): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165167.960:225): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165167.960:226): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165167.985:227): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165167.985:228): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165168.195:229): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165168.195:230): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165168.218:231): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165168.218:232): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165168.450:233): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165168.450:234): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165170.733:235): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165170.733:236): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165170.806:237): pid=4780 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165170.807:238): pid=4780 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656A6F796D686373796E797063797076777671686C616863706365796D686968203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165170.807:239): pid=4780 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165170.813:240): pid=4780 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165170.988:241): pid=4780 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165170.988:242): pid=4780 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165170.993:243): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165170.993:244): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165172.182:245): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165172.182:246): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165172.218:247): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165172.218:248): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165172.232:249): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165172.232:250): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165172.279:251): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165172.279:252): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165172.299:253): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165172.299:254): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165172.361:255): pid=4828 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165172.361:256): pid=4828 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6366766A656967766A676F68636A617765776267676E677674617874686B6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165172.362:257): pid=4828 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165172.366:258): pid=4828 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165172.536:259): pid=4828 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165172.537:260): pid=4828 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165172.541:261): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165172.541:262): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165172.561:263): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165172.561:264): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165172.610:265): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165172.610:266): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165172.625:267): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165172.625:268): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165172.653:269): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165172.653:270): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165172.667:271): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165172.667:272): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165172.730:273): pid=4871 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165172.731:274): pid=4871 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637A76706F6A787878636476616C7A647A7471787075726C677772697A6D6977203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165172.731:275): pid=4871 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165172.734:276): pid=4871 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165172.904:277): pid=4871 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165172.904:278): pid=4871 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165172.909:279): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165172.909:280): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165172.924:281): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165172.924:282): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165172.958:283): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165172.958:284): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165180.094:285): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165180.094:286): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165180.341:287): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165180.341:288): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165180.364:289): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165180.364:290): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165180.628:291): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165180.628:292): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165180.654:293): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165180.654:294): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165180.901:295): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165180.902:296): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165180.925:297): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165180.925:298): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165181.142:299): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165181.142:300): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165181.168:301): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165181.168:302): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165181.421:303): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165181.421:304): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165181.449:305): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165181.449:306): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165181.707:307): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165181.707:308): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165181.738:309): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165181.738:310): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165181.992:311): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165181.992:312): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165182.014:313): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165182.014:314): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165182.260:315): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165182.260:316): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165182.278:317): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165182.278:318): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165182.525:319): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165182.525:320): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165182.549:321): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165182.549:322): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165182.793:323): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165182.793:324): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165182.813:325): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165182.813:326): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165183.028:327): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165183.028:328): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165183.042:329): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165183.042:330): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165183.244:331): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165183.244:332): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165183.261:333): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165183.261:334): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165183.466:335): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165183.466:336): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165183.487:337): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165183.487:338): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165183.686:339): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165183.686:340): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165183.709:341): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165183.709:342): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165183.922:343): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165183.922:344): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165183.944:345): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165183.944:346): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165184.157:347): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165184.157:348): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165184.172:349): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165184.172:350): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165184.440:351): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165184.440:352): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165184.471:353): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165184.471:354): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165184.730:355): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165184.730:356): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165184.757:357): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165184.757:358): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165185.017:359): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165185.017:360): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165185.042:361): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165185.042:362): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165185.265:363): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165185.265:364): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165185.290:365): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165185.290:366): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165185.537:367): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165185.538:368): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165185.556:369): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165185.556:370): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165185.815:371): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165185.815:372): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165185.843:373): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165185.843:374): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165186.095:375): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165186.095:376): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165186.121:377): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165186.122:378): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165186.347:379): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165186.347:380): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165186.363:381): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165186.363:382): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165186.635:383): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165186.635:384): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165186.658:385): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165186.658:386): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165186.904:387): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165186.904:388): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165188.581:389): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165188.581:390): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165188.644:391): pid=5265 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165188.645:392): pid=5265 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72787A65616B6261637063716F6D676A776671736F6F74636771746A70697372203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165188.645:393): pid=5265 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165188.649:394): pid=5265 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1760165188.828:395): prog-id=25 op=LOAD
type=BPF msg=audit(1760165188.828:396): prog-id=26 op=LOAD
type=BPF msg=audit(1760165188.829:397): prog-id=27 op=LOAD
type=SERVICE_START msg=audit(1760165188.900:398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760165188.976:399): pid=5265 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165188.976:400): pid=5265 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165188.980:401): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165188.980:402): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165190.429:403): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165190.429:404): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165190.487:405): pid=5286 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165190.487:406): pid=5286 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C716F757A6D73646A61626E6F6278717A676A636A75696E7A756D7072746C7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165190.488:407): pid=5286 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165190.491:408): pid=5286 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165190.646:409): pid=5286 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165190.647:410): pid=5286 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165190.652:411): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165190.652:412): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165191.497:413): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165191.497:414): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165191.526:415): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165191.526:416): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165191.538:417): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165191.538:418): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165191.574:419): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165191.574:420): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165191.584:421): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165191.584:422): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165191.775:423): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165191.775:424): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165191.793:425): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165191.793:426): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165191.830:427): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165191.830:428): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165191.843:429): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165191.843:430): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165191.872:431): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165191.873:432): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165191.889:433): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165191.889:434): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165192.095:435): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165192.095:436): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165192.109:437): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165192.109:438): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165192.138:439): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165192.138:440): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165192.980:441): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165192.980:442): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165193.008:443): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165193.008:444): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165193.016:445): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165193.016:446): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165193.051:447): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165193.051:448): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165193.063:449): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165193.063:450): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165193.257:451): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165193.258:452): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165193.278:453): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165193.278:454): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165193.314:455): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165193.314:456): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165193.328:457): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165193.328:458): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165193.358:459): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165193.358:460): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165193.374:461): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165193.374:462): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165193.571:463): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165193.571:464): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165193.585:465): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165193.585:466): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165193.613:467): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165193.613:468): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165195.277:469): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165195.277:470): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165195.307:471): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165195.307:472): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165195.319:473): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165195.319:474): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165195.354:475): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165195.354:476): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165195.367:477): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165195.367:478): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165195.424:479): pid=5536 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165195.425:480): pid=5536 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A78726F7062636F6E626F6B6D796D64726D61787A61796D6D7A727161737975203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165195.425:481): pid=5536 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165195.428:482): pid=5536 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165195.590:483): pid=5536 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165195.590:484): pid=5536 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165195.595:485): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165195.595:486): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165195.613:487): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165195.614:488): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165195.648:489): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165195.649:490): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165195.659:491): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165195.659:492): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165195.689:493): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165195.689:494): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165195.703:495): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165195.703:496): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165195.762:497): pid=5579 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165195.762:498): pid=5579 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706D76637170666D6A657272737A64696D75766269766370776C676E66786562203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165195.763:499): pid=5579 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165195.765:500): pid=5579 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165195.928:501): pid=5579 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165195.928:502): pid=5579 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165195.932:503): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165195.932:504): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165195.945:505): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165195.945:506): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165195.974:507): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165195.974:508): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165196.934:509): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165196.934:510): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165197.159:511): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165197.159:512): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165197.186:513): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165197.186:514): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165197.362:515): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165197.362:516): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165198.286:517): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165198.286:518): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165198.316:519): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165198.316:520): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165198.329:521): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165198.329:522): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165198.365:523): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165198.365:524): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165198.383:525): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165198.383:526): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165198.441:527): pid=5673 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165198.442:528): pid=5673 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756C766F69747A746F75776C69746E657A6D6F74786C61656F6E64626D786569203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165198.442:529): pid=5673 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165198.445:530): pid=5673 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165198.609:531): pid=5673 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165198.610:532): pid=5673 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165198.614:533): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165198.614:534): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165198.632:535): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165198.632:536): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165198.672:537): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165198.672:538): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165198.683:539): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165198.684:540): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165198.711:541): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165198.711:542): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165198.723:543): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165198.723:544): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165198.781:545): pid=5716 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165198.781:546): pid=5716 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6C7469776A78686C6C6A677277747867756F7277666B6B6D7375756E6F7978203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165198.782:547): pid=5716 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165198.784:548): pid=5716 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165198.957:549): pid=5716 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165198.958:550): pid=5716 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165198.961:551): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165198.962:552): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165198.977:553): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165198.977:554): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165199.010:555): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165199.010:556): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165200.028:557): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165200.028:558): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165200.091:559): pid=5747 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165200.092:560): pid=5747 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E797070746D64726F6869726A647573746B61706C63767964636475656A6F68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165200.092:561): pid=5747 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165200.095:562): pid=5747 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165200.273:563): pid=5747 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165200.274:564): pid=5747 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165200.278:565): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165200.278:566): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165201.236:567): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165201.236:568): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165201.433:569): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165201.433:570): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165203.097:571): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165203.097:572): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165203.302:573): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165203.302:574): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1760165218.985:575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760165219.001:576): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760165219.001:577): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760165219.001:578): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1760165223.469:579): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165223.470:580): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165223.533:581): pid=5802 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165223.534:582): pid=5802 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72696D61667A6E727962746F74726270677269726D66686763756C776A6A6776203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165223.534:583): pid=5802 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165223.537:584): pid=5802 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165223.711:585): pid=5802 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165223.711:586): pid=5802 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165223.715:587): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165223.715:588): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1760165283.778:589): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4190 suid=1000 rport=35428 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1760165283.781:590): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1760165283.782:591): pid=4176 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1760165443.556:592): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=5816 suid=74 rport=35956 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760165443.556:593): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=5816 suid=74 rport=35956 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1760165443.611:594): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1760165443.626:595): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760165443.626:596): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f9:f9:2d:84:9b:11:98:82:1c:1b:5f:64:0d:15:f2:4d:d4:1f:60:57:6e:98:13:17:d5:96:07:15:ae:68:dc:a5 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1760165443.655:597): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760165443.656:598): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5816 suid=74 rport=35956 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1760165443.658:599): pid=5815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1760165443.658:600): pid=5815 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=3 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1760165443.658:600): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe04bcd6c0 a2=4 a3=3e8 items=0 ppid=1133 pid=5815 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=3 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760165443.658:600): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1760165443.660:601): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1760165443.679:602): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1760165443.681:603): pid=5818 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1760165443.725:604): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165443.725:605): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165443.944:606): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165443.944:607): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165456.742:608): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165456.742:609): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165456.776:610): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165456.776:611): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165456.784:612): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165456.784:613): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165456.822:614): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165456.822:615): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165456.866:616): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165456.866:617): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165456.927:618): pid=5880 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165456.927:619): pid=5880 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636A7064616E69796F6B67666D78756274776E687A7A797963727A6264686E77203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165456.928:620): pid=5880 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165456.932:621): pid=5880 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165457.098:622): pid=5880 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165457.098:623): pid=5880 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165457.103:624): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165457.103:625): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165457.125:626): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165457.125:627): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165457.166:628): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165457.166:629): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165457.181:630): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165457.181:631): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165457.212:632): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165457.212:633): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165457.224:634): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165457.224:635): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165457.283:636): pid=5923 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165457.283:637): pid=5923 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76796E6B7368646877716B6B75746773796C6C67737379697A6F74716A7A6871203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165457.284:638): pid=5923 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165457.286:639): pid=5923 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165457.485:640): pid=5923 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165457.485:641): pid=5923 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165457.490:642): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165457.490:643): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165457.500:644): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165457.500:645): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165457.533:646): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165457.533:647): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165457.746:648): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165457.746:649): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165457.800:650): pid=5953 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165457.800:651): pid=5953 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A77757768726E76626B7A6E78627572696A6863657563717865757A78656171203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165457.801:652): pid=5953 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165457.803:653): pid=5953 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_STOP msg=audit(1760165458.051:654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165458.088:655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760165458.110:656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165458.147:657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760165458.160:658): prog-id=28 op=LOAD
type=BPF msg=audit(1760165458.160:659): prog-id=29 op=LOAD
type=USER_END msg=audit(1760165458.183:660): pid=5953 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165458.183:661): pid=5953 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165458.188:662): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165458.188:663): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1760165458.232:664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1760165458.320:665): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165458.320:666): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165458.531:667): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165458.531:668): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1760165468.387:669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760165488.266:670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760165488.306:671): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760165488.306:672): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1760165503.839:673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760165503.847:674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760165513.887:675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760165518.597:676): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5818 suid=1000 rport=35956 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1760165518.602:677): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1760165518.602:678): pid=5815 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1760165561.839:679): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6057 suid=74 rport=51576 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760165561.839:680): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6057 suid=74 rport=51576 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1760165561.894:681): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1760165561.910:682): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760165561.910:683): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f9:f9:2d:84:9b:11:98:82:1c:1b:5f:64:0d:15:f2:4d:d4:1f:60:57:6e:98:13:17:d5:96:07:15:ae:68:dc:a5 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1760165561.939:684): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760165561.939:685): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6057 suid=74 rport=51576 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1760165561.941:686): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1760165561.941:687): pid=6056 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=4 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1760165561.941:687): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff062ca0d0 a2=4 a3=3e8 items=0 ppid=1133 pid=6056 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760165561.941:687): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1760165561.943:688): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1760165561.961:689): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1760165561.963:690): pid=6059 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1760165562.006:691): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165562.007:692): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165562.038:693): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165562.038:694): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165562.048:695): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165562.049:696): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165562.084:697): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165562.084:698): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165562.094:699): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165562.094:700): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165562.155:701): pid=6105 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165562.156:702): pid=6105 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B666568746C6F787467636A6C696D646178666E766A7168636266707562786D203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165562.157:703): pid=6105 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165562.161:704): pid=6105 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165562.324:705): pid=6105 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165562.325:706): pid=6105 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165562.329:707): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165562.329:708): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165562.342:709): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165562.342:710): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165562.377:711): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165562.377:712): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165562.387:713): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165562.387:714): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165562.416:715): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165562.416:716): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165562.426:717): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165562.426:718): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165562.481:719): pid=6148 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165562.481:720): pid=6148 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6B6A647A686E70636D6F6F6376717279626376777869656474637A76746F63203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165562.482:721): pid=6148 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165562.484:722): pid=6148 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165562.662:723): pid=6148 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165562.663:724): pid=6148 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165562.667:725): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165562.667:726): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165562.675:727): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165562.675:728): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165562.705:729): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165562.705:730): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1760165566.199:731): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6059 suid=1000 rport=51576 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1760165566.201:732): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1760165566.201:733): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1760165920.530:734): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6168 suid=74 rport=57332 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760165920.530:735): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6168 suid=74 rport=57332 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1760165920.584:736): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1760165920.599:737): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760165920.599:738): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f9:f9:2d:84:9b:11:98:82:1c:1b:5f:64:0d:15:f2:4d:d4:1f:60:57:6e:98:13:17:d5:96:07:15:ae:68:dc:a5 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1760165920.628:739): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760165920.628:740): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6168 suid=74 rport=57332 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1760165920.630:741): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1760165920.630:742): pid=6167 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=5 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1760165920.630:742): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd33ab89d0 a2=4 a3=3e8 items=0 ppid=1133 pid=6167 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=5 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760165920.630:742): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1760165920.632:743): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1760165920.649:744): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1760165920.651:745): pid=6170 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1760165920.693:746): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165920.693:747): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165920.753:748): pid=6184 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165920.753:749): pid=6184 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626A7075716A7078796C78626D6F74677A6373687A667A62646370636C64756A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165920.754:750): pid=6184 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165920.756:751): pid=6184 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165920.935:752): pid=6184 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165920.935:753): pid=6184 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165920.939:754): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165920.940:755): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165922.230:756): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165922.230:757): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165922.289:758): pid=6203 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165922.289:759): pid=6203 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6B656562686C7568657578767A70757277746E6A786C746A786A76676A6469203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165922.290:760): pid=6203 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165922.292:761): pid=6203 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165922.466:762): pid=6203 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165922.467:763): pid=6203 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165922.470:764): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165922.470:765): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165922.502:766): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165922.502:767): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165922.548:768): pid=6219 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165922.548:769): pid=6219 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7761777069756E6578616D7167686863766C7774666F646B7564786C70706E79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165922.549:770): pid=6219 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165922.552:771): pid=6219 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165922.697:772): pid=6219 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165922.698:773): pid=6219 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165922.701:774): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165922.701:775): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165922.725:776): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165922.725:777): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165922.775:778): pid=6236 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165922.776:779): pid=6236 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F77766B6E6D7761747A72716478617466626D67786961757A756A77696A716D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165922.776:780): pid=6236 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165922.778:781): pid=6236 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165922.950:782): pid=6236 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165922.951:783): pid=6236 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165922.954:784): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165922.954:785): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165922.980:786): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165922.980:787): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165923.033:788): pid=6252 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165923.033:789): pid=6252 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D757778736C6971736B71766767717A6C7A6E6F726C62736A74616D696F7570203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165923.033:790): pid=6252 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165923.034:791): pid=6252 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165923.199:792): pid=6252 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165923.200:793): pid=6252 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165923.202:794): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165923.202:795): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165923.651:796): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165923.651:797): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165923.698:798): pid=6268 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165923.698:799): pid=6268 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636A687A7265686C636C6F6B717571796C66657464706B6F796F7778726F7A79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165923.699:800): pid=6268 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165923.701:801): pid=6268 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165923.863:802): pid=6268 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165923.864:803): pid=6268 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165923.867:804): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165923.867:805): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165925.103:806): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165925.103:807): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165925.150:808): pid=6284 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165925.151:809): pid=6284 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74757879746B6B7A647665666967626C666565676470776B70787A726A687771203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165925.151:810): pid=6284 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165925.154:811): pid=6284 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1760165925.562:812): prog-id=30 op=LOAD
type=BPF msg=audit(1760165925.562:813): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760165925.562:814): prog-id=31 op=LOAD
type=BPF msg=audit(1760165925.562:815): prog-id=32 op=LOAD
type=BPF msg=audit(1760165925.562:816): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760165925.562:817): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760165925.564:818): prog-id=33 op=LOAD
type=BPF msg=audit(1760165925.564:819): prog-id=34 op=LOAD
type=BPF msg=audit(1760165925.564:820): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760165925.564:821): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760165925.566:822): prog-id=35 op=LOAD
type=BPF msg=audit(1760165925.566:823): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760165925.567:824): prog-id=36 op=LOAD
type=BPF msg=audit(1760165925.567:825): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760165925.567:826): prog-id=37 op=LOAD
type=BPF msg=audit(1760165925.567:827): prog-id=38 op=LOAD
type=BPF msg=audit(1760165925.567:828): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760165925.567:829): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760165925.568:830): prog-id=39 op=LOAD
type=BPF msg=audit(1760165925.568:831): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1760165925.589:832): pid=6284 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165925.589:833): pid=6284 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165925.593:834): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165925.593:835): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165926.414:836): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165926.414:837): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165926.475:838): pid=6331 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165926.475:839): pid=6331 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6A6764746D6963637A64616F6B67716C636A72656F796F74776C6C63616B64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165926.476:840): pid=6331 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165926.479:841): pid=6331 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165926.647:842): pid=6331 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165926.648:843): pid=6331 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165926.652:844): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165926.652:845): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165927.961:846): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165927.962:847): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165928.016:848): pid=6347 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165928.017:849): pid=6347 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C717A75686A79677178666E70677972647271726B66727475676C666C766373203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165928.017:850): pid=6347 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165928.019:851): pid=6347 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165928.199:852): pid=6347 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165928.199:853): pid=6347 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165928.203:854): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165928.203:855): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165928.239:856): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165928.239:857): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165928.296:858): pid=6365 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165928.296:859): pid=6365 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766F686E697179616B6279736D696E78766E707361667A7066786668626A666A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165928.297:860): pid=6365 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165928.300:861): pid=6365 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165928.460:862): pid=6365 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165928.460:863): pid=6365 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165928.463:864): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165928.463:865): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165928.493:866): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165928.493:867): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165928.537:868): pid=6383 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165928.537:869): pid=6383 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627266667A6863756E6C74756774647176776D6C796B656C75716B6265787069203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165928.538:870): pid=6383 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165928.540:871): pid=6383 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165928.674:872): pid=6383 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165928.674:873): pid=6383 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165928.678:874): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165928.678:875): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165928.707:876): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165928.707:877): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760165928.750:878): pid=6401 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760165928.750:879): pid=6401 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C756475756B6861726872796D6E61686478617A646D787575777969776A6970203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760165928.751:880): pid=6401 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760165928.752:881): pid=6401 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165928.900:882): pid=6401 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760165928.900:883): pid=6401 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760165928.904:884): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165928.904:885): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165930.407:886): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165930.408:887): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165930.615:888): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165930.615:889): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760165931.032:890): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760165931.033:891): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760165931.223:892): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760165931.224:893): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1760165933.912:894): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6170 suid=1000 rport=57332 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1760165933.914:895): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1760165933.915:896): pid=6167 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1760166008.366:897): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6448 suid=74 rport=36462 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760166008.366:898): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6448 suid=74 rport=36462 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1760166008.384:899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760166008.384:900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1760166008.421:901): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1760166008.437:902): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760166008.437:903): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f9:f9:2d:84:9b:11:98:82:1c:1b:5f:64:0d:15:f2:4d:d4:1f:60:57:6e:98:13:17:d5:96:07:15:ae:68:dc:a5 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1760166008.458:904): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760166008.459:905): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6448 suid=74 rport=36462 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1760166008.461:906): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1760166008.461:907): pid=6446 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=6 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1760166008.461:907): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffce089a930 a2=4 a3=3e8 items=0 ppid=1133 pid=6446 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760166008.461:907): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1760166008.462:908): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1760166008.479:909): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1760166008.481:910): pid=6451 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1760166008.525:911): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166008.525:912): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760166008.585:913): pid=6465 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760166008.585:914): pid=6465 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67756E6D7176637062646D737474666762716370616678796C757268696F7563203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760166008.586:915): pid=6465 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760166008.590:916): pid=6465 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1760166009.565:917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rhsm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760166050.210:918): pid=6465 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760166050.211:919): pid=6465 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166050.215:920): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166050.215:921): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166058.361:922): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166058.361:923): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166058.543:924): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166058.543:925): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166059.403:926): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166059.404:927): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760166059.469:928): pid=6580 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760166059.469:929): pid=6580 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6964687265796A6E73756C6A7265657771786B6767696B61656C736465776271203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760166059.470:930): pid=6580 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760166059.475:931): pid=6580 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=MAC_CONFIG_CHANGE msg=audit(1760166088.382:932): bool=virt_use_nfs val=1 old_val=0 auid=1000 ses=6AUID="zuul"
type=SYSCALL msg=audit(1760166088.382:932): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7ffd7b2acb9e a2=2 a3=0 items=0 ppid=6672 pid=6673 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:setsebool_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760166088.382:932): proctitle=2F7573722F7362696E2F7365747365626F6F6C002D50002D4E00766972745F7573655F6E66733D3100766972745F73616E64626F785F7573655F616C6C5F636170733D31
type=MAC_POLICY_LOAD msg=audit(1760166097.937:933): auid=1000 ses=6 lsm=selinux res=1AUID="zuul"
type=SYSCALL msg=audit(1760166097.937:933): arch=c000003e syscall=1 success=yes exit=3537292 a0=4 a1=7f076c600000 a2=35f98c a3=0 items=0 ppid=6672 pid=6687 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760166097.937:933): proctitle="/usr/sbin/load_policy"
type=SERVICE_START msg=audit(1760166110.644:934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r701d2ab724774b40a30ae8109025bb98 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760166110.844:935): prog-id=40 op=LOAD
type=BPF msg=audit(1760166110.844:936): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760166110.844:937): prog-id=41 op=LOAD
type=BPF msg=audit(1760166110.844:938): prog-id=42 op=LOAD
type=BPF msg=audit(1760166110.844:939): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760166110.844:940): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760166110.846:941): prog-id=43 op=LOAD
type=BPF msg=audit(1760166110.846:942): prog-id=44 op=LOAD
type=BPF msg=audit(1760166110.846:943): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760166110.846:944): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760166110.848:945): prog-id=45 op=LOAD
type=BPF msg=audit(1760166110.848:946): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760166110.849:947): prog-id=46 op=LOAD
type=BPF msg=audit(1760166110.849:948): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760166110.849:949): prog-id=47 op=LOAD
type=BPF msg=audit(1760166110.849:950): prog-id=48 op=LOAD
type=BPF msg=audit(1760166110.849:951): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760166110.849:952): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760166110.850:953): prog-id=49 op=LOAD
type=BPF msg=audit(1760166110.850:954): prog-id=0 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1760166110.876:955): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="container-selinux-3:2.229.0-1.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:956): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-libs-3.10.2-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:957): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnftnl-1.2.2-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:958): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="protobuf-c-1.3.3-12.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:959): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-nft-1.8.8-6.el9_1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:960): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nftables-1:1.0.4-10.el9_1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:961): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="conmon-2:2.1.7-1.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:962): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="aardvark-dns-2:1.5.0-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:963): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="netavark-2:1.5.1-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:964): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="yajl-2.1.0-21.el9_0.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:965): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnet-1.2-6.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:966): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="criu-3.17-5.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:967): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="criu-libs-3.17-5.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:968): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="crun-1.8.4-1.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:969): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libslirp-4.4.0-7.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:970): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="slirp4netns-1.2.0-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:971): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="shadow-utils-subid-2:4.9-6.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:972): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-common-3.10.2-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:973): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-3.10.2-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:974): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-overlayfs-1.11-1.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:975): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="containers-common-2:1-52.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760166110.876:976): pid=6582 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="podman-2:4.4.1-22.el9_2.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=USER_END msg=audit(1760166112.307:977): pid=6580 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760166112.307:978): pid=6580 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166112.312:979): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166112.312:980): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1760166119.248:981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760166119.248:982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760166119.250:983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r701d2ab724774b40a30ae8109025bb98 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1760166165.791:984): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166165.791:985): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760166165.855:986): pid=18269 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760166165.855:987): pid=18269 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62776E6165626961677A6B65776F77617367776E72726A7574736E6B6F76736D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760166165.856:988): pid=18269 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760166165.861:989): pid=18269 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166166.569:990): pid=18269 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760166166.569:991): pid=18269 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166166.573:992): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166166.573:993): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166166.612:994): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166166.612:995): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166167.512:996): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166167.512:997): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1760166169.859:998): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6451 suid=1000 rport=36462 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1760166169.865:999): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1760166169.866:1000): pid=6446 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1760166184.515:1001): pid=18335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1760166184.518:1002): pid=18338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1760166184.521:1003): pid=18337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18341 suid=74 rport=43792 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760166184.521:1004): pid=18337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18341 suid=74 rport=43792 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1760166184.531:1005): pid=18337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18341 suid=74 rport=43792 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1760166184.532:1006): pid=18337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1760166184.534:1007): pid=18334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18342 suid=74 rport=43806 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760166184.534:1008): pid=18334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18342 suid=74 rport=43806 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1760166184.536:1009): pid=18334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18342 suid=74 rport=43806 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1760166184.537:1010): pid=18334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1760166184.540:1011): pid=18336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1760166189.817:1012): pid=18344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18345 suid=74 rport=58550 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760166189.818:1013): pid=18344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18345 suid=74 rport=58550 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1760166189.874:1014): pid=18344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1760166189.889:1015): pid=18344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760166189.889:1016): pid=18344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f9:f9:2d:84:9b:11:98:82:1c:1b:5f:64:0d:15:f2:4d:d4:1f:60:57:6e:98:13:17:d5:96:07:15:ae:68:dc:a5 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1760166189.918:1017): pid=18344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760166189.918:1018): pid=18344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18345 suid=74 rport=58550 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1760166189.921:1019): pid=18344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1760166189.921:1020): pid=18344 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=7 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1760166189.921:1020): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff3d42d9b0 a2=4 a3=3e8 items=0 ppid=1133 pid=18344 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760166189.921:1020): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1760166189.922:1021): pid=18344 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1760166189.941:1022): pid=18344 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1760166189.943:1023): pid=18347 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1760166189.987:1024): pid=18344 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166189.987:1025): pid=18344 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166190.233:1026): pid=18344 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166190.234:1027): pid=18344 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166190.869:1028): pid=18344 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166190.869:1029): pid=18344 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760166190.931:1030): pid=18375 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760166190.932:1031): pid=18375 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6568746B747370766E64766D7078646D6C6D6E68656F706962726D6B647A6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760166190.932:1032): pid=18375 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760166190.936:1033): pid=18375 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166191.136:1034): pid=18375 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760166191.136:1035): pid=18375 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166191.140:1036): pid=18344 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166191.140:1037): pid=18344 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1760166192.611:1038): pid=18344 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18347 suid=1000 rport=58550 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1760166192.613:1039): pid=18344 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1760166192.613:1040): pid=18344 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1760166280.204:1041): pid=18379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18380 suid=74 rport=49168 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760166280.204:1042): pid=18379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18380 suid=74 rport=49168 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1760166280.258:1043): pid=18379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1760166280.276:1044): pid=18379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760166280.276:1045): pid=18379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f9:f9:2d:84:9b:11:98:82:1c:1b:5f:64:0d:15:f2:4d:d4:1f:60:57:6e:98:13:17:d5:96:07:15:ae:68:dc:a5 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1760166280.304:1046): pid=18379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760166280.305:1047): pid=18379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18380 suid=74 rport=49168 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1760166280.307:1048): pid=18379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1760166280.307:1049): pid=18379 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=8 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1760166280.307:1049): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe385bb450 a2=4 a3=3e8 items=0 ppid=1133 pid=18379 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760166280.307:1049): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1760166280.308:1050): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1760166280.324:1051): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1760166280.326:1052): pid=18382 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1760166280.369:1053): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166280.369:1054): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760166280.427:1055): pid=18396 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760166280.427:1056): pid=18396 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636569626976777968756C6C6F6177637778617676746F77656A6879716C6761203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760166280.428:1057): pid=18396 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760166280.431:1058): pid=18396 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166280.635:1059): pid=18396 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760166280.636:1060): pid=18396 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166280.640:1061): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166280.640:1062): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166281.344:1063): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166281.344:1064): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760166281.403:1065): pid=18412 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760166281.403:1066): pid=18412 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6268756C77676E697468787A6F6D736D69637469657A74787A647A766F78656F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760166281.404:1067): pid=18412 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760166281.406:1068): pid=18412 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166281.616:1069): pid=18412 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760166281.616:1070): pid=18412 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166281.620:1071): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166281.620:1072): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166282.814:1073): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166282.815:1074): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166282.845:1075): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166282.845:1076): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166282.854:1077): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166282.854:1078): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166282.888:1079): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166282.889:1080): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166282.899:1081): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166282.899:1082): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760166282.960:1083): pid=18462 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760166282.961:1084): pid=18462 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7262637A77756A727A6A6D65696C6B6B6B626F7667697278616A707861667A69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760166282.961:1085): pid=18462 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760166282.964:1086): pid=18462 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166283.130:1087): pid=18462 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760166283.130:1088): pid=18462 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166283.134:1089): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166283.134:1090): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166283.154:1091): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166283.154:1092): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166283.189:1093): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166283.189:1094): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166283.204:1095): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166283.205:1096): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166283.234:1097): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166283.234:1098): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166283.251:1099): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166283.251:1100): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760166283.310:1101): pid=18505 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760166283.310:1102): pid=18505 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74796F66796A78656C6562796D7663726C6762707A767973616E6E7074727964203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760166283.311:1103): pid=18505 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760166283.313:1104): pid=18505 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166283.488:1105): pid=18505 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760166283.488:1106): pid=18505 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166283.492:1107): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166283.492:1108): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166283.506:1109): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166283.507:1110): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166283.537:1111): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166283.537:1112): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166284.460:1113): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166284.460:1114): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166284.489:1115): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166284.489:1116): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166284.499:1117): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166284.499:1118): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166284.536:1119): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166284.536:1120): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166284.547:1121): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166284.547:1122): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760166284.604:1123): pid=18567 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760166284.604:1124): pid=18567 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69706A6B62727A7678787371746272666B7176636B737664686B6A7572747474203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760166284.605:1125): pid=18567 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760166284.607:1126): pid=18567 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166284.753:1127): pid=18567 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760166284.753:1128): pid=18567 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166284.757:1129): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166284.758:1130): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166284.780:1131): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166284.781:1132): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166284.815:1133): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166284.815:1134): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166284.834:1135): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166284.834:1136): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166284.860:1137): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166284.861:1138): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166284.878:1139): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166284.878:1140): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760166284.936:1141): pid=18610 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760166284.936:1142): pid=18610 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F77636169746178627970696562776963777A737A736F72626962786C6C7061203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760166284.937:1143): pid=18610 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760166284.939:1144): pid=18610 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166285.095:1145): pid=18610 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760166285.095:1146): pid=18610 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166285.100:1147): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166285.100:1148): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166285.113:1149): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166285.113:1150): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166285.139:1151): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166285.139:1152): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166287.169:1153): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166287.169:1154): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760166287.230:1155): pid=18640 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760166287.230:1156): pid=18640 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627A726379766E6E71667A6D666B787A6569686A7178637472696679646B6B70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760166287.231:1157): pid=18640 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760166287.234:1158): pid=18640 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166287.410:1159): pid=18640 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760166287.410:1160): pid=18640 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760166287.414:1161): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166287.414:1162): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166288.142:1163): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166288.142:1164): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166288.171:1165): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166288.171:1166): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166288.181:1167): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166288.181:1168): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166288.215:1169): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166288.215:1170): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166288.226:1171): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166288.226:1172): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166288.435:1173): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166288.435:1174): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166288.447:1175): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166288.447:1176): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166288.647:1177): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166288.647:1178): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166288.661:1179): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166288.661:1180): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166288.690:1181): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166288.690:1182): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166289.462:1183): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166289.462:1184): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166289.491:1185): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166289.491:1186): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166289.500:1187): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166289.500:1188): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166289.535:1189): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166289.535:1190): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166289.550:1191): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166289.550:1192): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166289.751:1193): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166289.751:1194): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166289.763:1195): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166289.764:1196): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166289.967:1197): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166289.968:1198): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166289.978:1199): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166289.978:1200): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166290.009:1201): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166290.009:1202): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166291.314:1203): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166291.315:1204): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166291.342:1205): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166291.342:1206): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166291.350:1207): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166291.350:1208): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166291.379:1209): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166291.380:1210): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166291.390:1211): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166291.390:1212): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166291.575:1213): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166291.575:1214): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166291.593:1215): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166291.593:1216): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166291.789:1217): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166291.789:1218): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166291.805:1219): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166291.805:1220): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166291.823:1221): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166291.823:1222): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1760166292.455:1223): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18382 suid=1000 rport=49168 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1760166292.457:1224): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1760166292.457:1225): pid=18379 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1760166423.459:1226): pid=18872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18873 suid=74 rport=44430 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760166423.459:1227): pid=18872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18873 suid=74 rport=44430 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1760166423.524:1228): pid=18872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760166423.524:1229): pid=18872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f9:f9:2d:84:9b:11:98:82:1c:1b:5f:64:0d:15:f2:4d:d4:1f:60:57:6e:98:13:17:d5:96:07:15:ae:68:dc:a5 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1760166423.545:1230): pid=18872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.199 addr=38.102.83.199 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760166423.546:1231): pid=18872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18873 suid=74 rport=44430 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1760166423.548:1232): pid=18872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.199 addr=38.102.83.199 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1760166423.548:1233): pid=18872 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=9 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1760166423.548:1233): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff41c0be40 a2=4 a3=3e8 items=0 ppid=1133 pid=18872 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760166423.548:1233): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1760166423.549:1234): pid=18872 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.199 addr=38.102.83.199 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1760166423.565:1235): pid=18872 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.199 addr=38.102.83.199 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1760166423.568:1236): pid=18875 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.199 addr=38.102.83.199 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1760166423.610:1237): pid=18872 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166423.610:1238): pid=18872 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166423.642:1239): pid=18872 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166423.642:1240): pid=18872 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166423.661:1241): pid=18872 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166423.661:1242): pid=18872 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166423.739:1243): pid=18872 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166423.739:1244): pid=18872 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760166423.761:1245): pid=18872 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760166423.762:1246): pid=18872 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760166423.954:1247): pid=18872 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760166423.954:1248): pid=18872 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1760166723.364:1249): pid=18872 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18875 suid=1000 rport=44430 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.199 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1760166723.367:1250): pid=18872 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.199 addr=38.102.83.199 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1760166723.367:1251): pid=18872 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.199 addr=38.102.83.199 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1760167067.489:1252): pid=18928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18929 suid=74 rport=60170 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760167067.490:1253): pid=18928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18929 suid=74 rport=60170 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1760167067.544:1254): pid=18928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1760167067.558:1255): pid=18928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760167067.558:1256): pid=18928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f9:f9:2d:84:9b:11:98:82:1c:1b:5f:64:0d:15:f2:4d:d4:1f:60:57:6e:98:13:17:d5:96:07:15:ae:68:dc:a5 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1760167067.588:1257): pid=18928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760167067.588:1258): pid=18928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18929 suid=74 rport=60170 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1760167067.590:1259): pid=18928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1760167067.591:1260): pid=18928 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=10 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1760167067.591:1260): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff0a2eee10 a2=4 a3=3e8 items=0 ppid=1133 pid=18928 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760167067.591:1260): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1760167067.592:1261): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1760167067.608:1262): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1760167067.611:1263): pid=18931 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1760167067.652:1264): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167067.652:1265): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760167067.859:1266): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167067.859:1267): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167069.115:1268): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167069.115:1269): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167069.175:1270): pid=18963 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167069.176:1271): pid=18963 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7476706863766F76756D70786E6F6178676B76646D657170706A6B6E6A6D6A69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167069.177:1272): pid=18963 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167069.180:1273): pid=18963 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167071.353:1274): pid=18963 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167071.353:1275): pid=18963 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167071.357:1276): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167071.357:1277): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167074.060:1278): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167074.060:1279): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167074.107:1280): pid=18982 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167074.107:1281): pid=18982 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78686F67696172636B6C676D69646D646C776B7674786A716970777766746363203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167074.107:1282): pid=18982 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167074.109:1283): pid=18982 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1760167096.222:1284): pid=19122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=19123 suid=74 rport=32848 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=167.172.178.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760167096.222:1285): pid=19122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=19123 suid=74 rport=32848 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=167.172.178.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1760167096.591:1286): pid=19122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19123 suid=74 rport=32848 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=167.172.178.186 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1760167096.592:1287): pid=19122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=167.172.178.186 addr=167.172.178.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1760167096.593:1288): pid=19122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=167.172.178.186 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1760167102.634:1289): pid=18982 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167102.634:1290): pid=18982 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167102.639:1291): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167102.639:1292): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167130.291:1293): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167130.291:1294): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167130.342:1295): pid=19141 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167130.343:1296): pid=19141 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75627363756177776B657265767A7261687964797A757165796476797568766A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167130.344:1297): pid=19141 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167130.346:1298): pid=19141 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167136.426:1299): pid=19141 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167136.427:1300): pid=19141 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167136.430:1301): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167136.430:1302): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167141.819:1303): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167141.819:1304): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167141.880:1305): pid=19341 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167141.880:1306): pid=19341 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67677466757871767A6F7361786173676A6E6B666A716475756B69796162746E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167141.881:1307): pid=19341 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167141.885:1308): pid=19341 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167156.858:1309): pid=19341 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167156.858:1310): pid=19341 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167156.862:1311): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167156.862:1312): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167174.602:1313): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167174.602:1314): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167174.666:1315): pid=19676 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167174.666:1316): pid=19676 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7469616370626B6D776A696A73696D6C7A7764706A78797A75656A6866756A6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167174.667:1317): pid=19676 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167174.669:1318): pid=19676 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167190.310:1319): pid=19676 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167190.311:1320): pid=19676 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167190.315:1321): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167190.315:1322): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167206.358:1323): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167206.358:1324): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167206.412:1325): pid=20073 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167206.412:1326): pid=20073 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6C6775736763627A636375787A7A63616565676A767266777A717562696572203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167206.412:1327): pid=20073 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167206.414:1328): pid=20073 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167222.844:1329): pid=20073 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167222.844:1330): pid=20073 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167222.848:1331): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167222.848:1332): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167240.248:1333): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167240.248:1334): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167240.308:1335): pid=20411 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167240.308:1336): pid=20411 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7767616277616870686C62676A6770766A72776C62676F6B68656679666E6E64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167240.309:1337): pid=20411 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167240.312:1338): pid=20411 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167242.397:1339): pid=20411 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167242.397:1340): pid=20411 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167242.401:1341): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167242.401:1342): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167245.310:1343): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167245.310:1344): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167245.365:1345): pid=20430 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167245.365:1346): pid=20430 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756E69747169617A6C726A76746F766A656572647A737A70736A6C72656D6979203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167245.365:1347): pid=20430 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167245.368:1348): pid=20430 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1760167247.446:1349): pid=20434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=20436 suid=74 rport=36664 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760167247.447:1350): pid=20434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=20436 suid=74 rport=36664 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1760167247.955:1351): pid=20434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20436 suid=74 rport=36664 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1760167247.956:1352): pid=20434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=78.128.112.74 addr=78.128.112.74 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1760167247.957:1353): pid=20434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=ssh res=failed'UID="root" AUID="unset"
type=MAC_POLICY_LOAD msg=audit(1760167263.758:1354): auid=1000 ses=10 lsm=selinux res=1AUID="zuul"
type=SYSCALL msg=audit(1760167263.758:1354): arch=c000003e syscall=1 success=yes exit=3540283 a0=4 a1=7fd2e2800000 a2=36053b a3=0 items=0 ppid=20522 pid=20529 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760167263.758:1354): proctitle="/usr/sbin/load_policy"
type=ADD_GROUP msg=audit(1760167264.024:1355): pid=20532 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="unbound"
type=GRP_MGMT msg=audit(1760167264.028:1356): pid=20532 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="unbound"
type=ADD_USER msg=audit(1760167264.085:1357): pid=20539 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="unbound" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=ADD_GROUP msg=audit(1760167264.261:1358): pid=20552 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=986 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="openvswitch"
type=GRP_MGMT msg=audit(1760167264.265:1359): pid=20552 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=986 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="openvswitch"
type=ADD_USER msg=audit(1760167264.316:1360): pid=20559 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="openvswitch" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=ADD_GROUP msg=audit(1760167264.386:1361): pid=20567 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=985 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="hugetlbfs"
type=GRP_MGMT msg=audit(1760167264.390:1362): pid=20567 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=985 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="hugetlbfs"
type=USER_MGMT msg=audit(1760167264.438:1363): pid=20575 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="hugetlbfs" acct="openvswitch" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=USER_MGMT msg=audit(1760167264.438:1364): pid=20575 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-shadow-group grp="hugetlbfs" acct="openvswitch" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1760167268.015:1365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r8845d029f848457181254e050c5c1d7e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760167268.248:1366): prog-id=50 op=LOAD
type=BPF msg=audit(1760167268.248:1367): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167268.248:1368): prog-id=51 op=LOAD
type=BPF msg=audit(1760167268.248:1369): prog-id=52 op=LOAD
type=BPF msg=audit(1760167268.248:1370): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167268.248:1371): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167268.250:1372): prog-id=53 op=LOAD
type=BPF msg=audit(1760167268.250:1373): prog-id=54 op=LOAD
type=BPF msg=audit(1760167268.250:1374): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167268.250:1375): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167268.251:1376): prog-id=55 op=LOAD
type=BPF msg=audit(1760167268.251:1377): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167268.252:1378): prog-id=56 op=LOAD
type=BPF msg=audit(1760167268.252:1379): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167268.252:1380): prog-id=57 op=LOAD
type=BPF msg=audit(1760167268.252:1381): prog-id=58 op=LOAD
type=BPF msg=audit(1760167268.252:1382): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167268.252:1383): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167268.254:1384): prog-id=59 op=LOAD
type=BPF msg=audit(1760167268.254:1385): prog-id=0 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1760167268.295:1386): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-netaddr-0.8.0-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.295:1387): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="git-core-2.39.5-1.el9_2.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.295:1388): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pbr-5.5.1-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.295:1389): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="NetworkManager-ovs-1:1.42.2-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.295:1390): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-iso8601-0.1.12-5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.295:1391): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="NetworkManager-config-server-1:1.42.2-32.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.295:1392): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyparsing-2.4.7-9.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.295:1393): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="chkconfig-1.20-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.295:1394): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-packaging-20.9-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.295:1395): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nmstate-libs-2.2.39-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.295:1396): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-libnmstate-2.2.39-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.295:1397): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openvswitch-selinux-extra-policy-1.0-39.el9fdp.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.295:1398): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nmstate-2.2.39-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.295:1399): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="unbound-libs-1.16.2-3.el9_2.4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.295:1400): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openvswitch3.3-3.3.4-110.el9fdp.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.295:1401): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nispor-1.2.10-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1402): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mstflint-4.23.0-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1403): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sshpass-1.09-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1404): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-greenlet-1.1.2-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1405): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-zipp-3.4.0-5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1406): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-importlib-metadata-1.7.0-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1407): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-stevedore-3.3.3-17.1.20230621041426.7b48fff.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1408): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-wrapt-1.12.1-6.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1409): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-debtcollector-2.2.0-17.1.20230620164104.649189d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1410): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-rfc3986-1.4.0-7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1411): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-anyjson-0.3.3-26.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1412): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyroute2-0.6.6-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1413): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-utils-lang-4.8.2-17.1.20230621020317.a38b56a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1414): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-i18n-lang-5.0.1-17.1.20230621104020.73187bd.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1415): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-i18n-5.0.1-17.1.20230621104020.73187bd.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1416): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-config-2:8.5.1-17.1.20230621105008.de1dbee.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1417): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-utils-4.8.2-17.1.20230621020317.a38b56a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1418): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-concurrency-lang-4.4.0-17.1.20230620204443.7dcf9e9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1419): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-fasteners-0.14.1-24.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1420): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-concurrency-4.4.0-17.1.20230620204443.7dcf9e9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1421): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-ply-3.11-14.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1422): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pycparser-2.20-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1423): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cffi-1.14.5-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1424): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cryptography-36.0.1-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1425): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-eventlet-0.30.2-6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1426): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bc-1.07.1-14.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1427): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="initscripts-rename-device-10.11.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1428): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="initscripts-10.11.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1429): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-network-scripts-10.11.1-9.17_1.1.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1430): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-network-scripts-openvswitch3.3-10.11.1-9.17_1.1.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1431): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rhosp-network-scripts-openvswitch-3.3-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1432): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rhosp-openvswitch-3.3-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1433): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-net-config-14.2.1-17.1.20250705140814.61d7bd7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167268.296:1434): pid=20432 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-ansible-core-2.14.2-4.7.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1760167269.060:1435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760167269.060:1436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760167269.063:1437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r8845d029f848457181254e050c5c1d7e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760167269.853:1438): pid=20430 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167269.853:1439): pid=20430 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167269.859:1440): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167269.859:1441): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1760167271.509:1442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760167271.509:1443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1760167298.450:1444): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167298.450:1445): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167298.514:1446): pid=21857 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167298.515:1447): pid=21857 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646876707968697974717A6475717A6B67786E66766B6B66777872666C6B6773203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167298.516:1448): pid=21857 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167298.521:1449): pid=21857 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167310.488:1450): pid=21857 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167310.488:1451): pid=21857 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167310.492:1452): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167310.492:1453): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167321.832:1454): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167321.833:1455): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167321.893:1456): pid=21877 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167321.893:1457): pid=21877 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637A776474667465766F6C71677264706A667561737467677968656861616279203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167321.894:1458): pid=21877 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167321.897:1459): pid=21877 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167322.075:1460): pid=21877 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167322.075:1461): pid=21877 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167322.080:1462): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167322.080:1463): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167322.596:1464): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167322.596:1465): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760167322.626:1466): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167322.626:1467): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167322.648:1468): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167322.648:1469): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760167322.683:1470): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167322.683:1471): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167322.808:1472): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167322.808:1473): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167322.856:1474): pid=21925 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167322.857:1475): pid=21925 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707169616566697670637A78756A746E707177696A6B6E796F6D79687763756C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167322.857:1476): pid=21925 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167322.860:1477): pid=21925 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167323.001:1478): pid=21925 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167323.001:1479): pid=21925 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167323.004:1480): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167323.004:1481): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167323.020:1482): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167323.021:1483): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760167323.050:1484): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167323.050:1485): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167323.065:1486): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167323.065:1487): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760167323.094:1488): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167323.094:1489): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167323.199:1490): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167323.199:1491): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167323.261:1492): pid=21968 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167323.262:1493): pid=21968 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7277636C707973626371737A6D67757A65707A6C6F6365766B6F68636E766B6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167323.262:1494): pid=21968 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167323.265:1495): pid=21968 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167323.450:1496): pid=21968 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167323.450:1497): pid=21968 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167323.454:1498): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167323.454:1499): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167323.477:1500): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167323.477:1501): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760167323.503:1502): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167323.503:1503): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167324.526:1504): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167324.526:1505): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167324.586:1506): pid=21998 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167324.586:1507): pid=21998 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687670726C70786C6E62656379766F71616362786E65686E71666966636C6978203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167324.587:1508): pid=21998 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167324.589:1509): pid=21998 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167324.807:1510): pid=21998 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167324.807:1511): pid=21998 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167324.811:1512): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167324.811:1513): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167324.851:1514): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167324.851:1515): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167324.889:1516): pid=22019 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167324.890:1517): pid=22019 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756C6E6776677469666B617A65726D6B78797A79647678626A6A75786D69737A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167324.890:1518): pid=22019 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167324.892:1519): pid=22019 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167325.056:1520): pid=22019 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167325.056:1521): pid=22019 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167325.060:1522): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167325.060:1523): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167325.093:1524): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167325.093:1525): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167325.140:1526): pid=22039 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167325.141:1527): pid=22039 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736879636D6463706D6777716665797768786D6E69647A677879626478797176203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167325.141:1528): pid=22039 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167325.144:1529): pid=22039 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167325.320:1530): pid=22039 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167325.320:1531): pid=22039 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167325.324:1532): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167325.324:1533): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167325.357:1534): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167325.357:1535): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167325.407:1536): pid=22059 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167325.408:1537): pid=22059 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65656563656C68786973737479657373656D637A6965627A696E72776D766B79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167325.408:1538): pid=22059 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167325.411:1539): pid=22059 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167325.588:1540): pid=22059 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167325.589:1541): pid=22059 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167325.593:1542): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167325.593:1543): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167325.629:1544): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167325.629:1545): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167325.688:1546): pid=22079 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167325.689:1547): pid=22079 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7675736B6876667464786B636962756C757970676667756E707877686F6B7468203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167325.690:1548): pid=22079 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167325.693:1549): pid=22079 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167325.861:1550): pid=22079 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167325.862:1551): pid=22079 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167325.866:1552): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167325.866:1553): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167328.924:1554): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167328.924:1555): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167328.986:1556): pid=22099 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167328.987:1557): pid=22099 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7A736A6E72647A6663647977656F707062716B786378706567746B6E647579203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167328.988:1558): pid=22099 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167328.991:1559): pid=22099 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1760167329.717:1560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760167329.746:1561): pid=22099 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167329.747:1562): pid=22099 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167329.751:1563): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167329.751:1564): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167329.782:1565): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167329.782:1566): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167329.841:1567): pid=22272 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167329.841:1568): pid=22272 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796C697569656E626E667766666D6E707576686A626B646C657574746A76666B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167329.842:1569): pid=22272 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167329.845:1570): pid=22272 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1760167330.448:1571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovsdb-server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760167330.479:1572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovs-delete-transient-ports comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760167330.747:1573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovs-vswitchd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760167330.752:1574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openvswitch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760167330.783:1575): pid=22272 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167330.783:1576): pid=22272 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167330.788:1577): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167330.788:1578): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167333.143:1579): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167333.143:1580): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167333.204:1581): pid=22438 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167333.204:1582): pid=22438 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A787664647170797676767866616D6B6E6B77636B6E737561756B6A6D6F787A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167333.205:1583): pid=22438 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167333.209:1584): pid=22438 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=ANOM_PROMISCUOUS msg=audit(1760167334.367:1585): dev=ovs-system prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1760167334.367:1585): arch=c000003e syscall=46 success=yes exit=56 a0=15 a1=7ffc89a35ee0 a2=0 a3=0 items=0 ppid=1 pid=22414 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1760167334.367:1585): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1760167334.413:1586): dev=br-ex prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1760167334.413:1586): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7ffc89a35ec0 a2=0 a3=0 items=0 ppid=1 pid=22414 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1760167334.413:1586): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_START msg=audit(1760167337.673:1587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1760167339.883:1588): dev=eth1 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1760167339.883:1588): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7ffc89a35ec0 a2=0 a3=0 items=0 ppid=1 pid=22414 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1760167339.883:1588): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1760167340.057:1589): dev=vlan44 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1760167340.057:1589): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7ffc89a35ec0 a2=0 a3=0 items=0 ppid=1 pid=22414 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1760167340.057:1589): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1760167343.315:1590): dev=vlan20 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1760167343.315:1590): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7ffc89a35ec0 a2=0 a3=0 items=0 ppid=1 pid=22414 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1760167343.315:1590): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1760167346.588:1591): dev=vlan23 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1760167346.588:1591): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7ffc89a35ec0 a2=0 a3=0 items=0 ppid=1 pid=22414 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1760167346.588:1591): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_STOP msg=audit(1760167347.709:1592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1760167349.890:1593): dev=vlan22 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1760167349.890:1593): arch=c000003e syscall=46 success=yes exit=52 a0=34 a1=7ffc89a35ec0 a2=0 a3=0 items=0 ppid=1 pid=22414 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1760167349.890:1593): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1760167353.182:1594): dev=vlan21 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1760167353.182:1594): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7ffc89a35ec0 a2=0 a3=0 items=0 ppid=1 pid=22414 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1760167353.182:1594): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=USER_END msg=audit(1760167362.792:1595): pid=22438 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167362.793:1596): pid=22438 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167362.799:1597): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167362.799:1598): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167415.589:1599): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167415.590:1600): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760167417.847:1601): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167417.847:1602): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167421.513:1603): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167421.513:1604): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760167421.786:1605): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167421.786:1606): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167421.855:1607): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167421.855:1608): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167421.918:1609): pid=23728 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167421.918:1610): pid=23728 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6A62676F677575656D6C697A6B6D69696E756E6C76626F7763706E776B776D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167421.920:1611): pid=23728 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167421.924:1612): pid=23728 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167422.159:1613): pid=23728 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167422.159:1614): pid=23728 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167422.164:1615): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167422.164:1616): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167423.713:1617): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167423.713:1618): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760167423.979:1619): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167423.979:1620): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167424.022:1621): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167424.022:1622): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167424.072:1623): pid=23758 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167424.072:1624): pid=23758 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76696C61687361716E77746865677876786A796C747A64706C72627778697168203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167424.073:1625): pid=23758 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167424.074:1626): pid=23758 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167424.307:1627): pid=23758 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167424.307:1628): pid=23758 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167424.310:1629): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167424.310:1630): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167425.167:1631): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167425.167:1632): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760167425.363:1633): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167425.363:1634): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167425.931:1635): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167425.931:1636): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760167426.135:1637): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167426.135:1638): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167426.766:1639): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167426.766:1640): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167426.822:1641): pid=23807 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167426.822:1642): pid=23807 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7071696B656E776C6D6667686B776D65696C696E6B75716B7063676377736179203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167426.823:1643): pid=23807 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167426.825:1644): pid=23807 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1760167426.999:1645): prog-id=60 op=LOAD
type=BPF msg=audit(1760167426.999:1646): prog-id=61 op=LOAD
type=SERVICE_START msg=audit(1760167427.075:1647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760167427.092:1648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760167427.102:1649): pid=23807 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167427.102:1650): pid=23807 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167427.107:1651): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167427.107:1652): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1760167428.617:1653): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18931 suid=1000 rport=60170 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1760167428.623:1654): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1760167428.624:1655): pid=18928 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1760167431.598:1656): pid=23824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23825 suid=74 rport=60308 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760167431.599:1657): pid=23824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23825 suid=74 rport=60308 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1760167431.654:1658): pid=23824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1760167431.668:1659): pid=23824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760167431.668:1660): pid=23824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f9:f9:2d:84:9b:11:98:82:1c:1b:5f:64:0d:15:f2:4d:d4:1f:60:57:6e:98:13:17:d5:96:07:15:ae:68:dc:a5 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1760167431.687:1661): pid=23824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760167431.687:1662): pid=23824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23825 suid=74 rport=60308 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1760167431.689:1663): pid=23824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1760167431.689:1664): pid=23824 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=11 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1760167431.689:1664): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffeb1d59090 a2=4 a3=3e8 items=0 ppid=1133 pid=23824 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760167431.689:1664): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1760167431.691:1665): pid=23824 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1760167431.710:1666): pid=23824 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1760167431.712:1667): pid=23827 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1760167431.756:1668): pid=23824 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167431.756:1669): pid=23824 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760167431.958:1670): pid=23824 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167431.958:1671): pid=23824 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1760167433.896:1672): pid=23824 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23827 suid=1000 rport=60308 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1760167433.899:1673): pid=23824 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1760167433.899:1674): pid=23824 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=SERVICE_STOP msg=audit(1760167437.121:1675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760167457.113:1676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760167457.151:1677): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167457.151:1678): prog-id=0 op=UNLOAD
type=CRYPTO_SESSION msg=audit(1760167520.687:1679): pid=23845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23846 suid=74 rport=39318 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760167520.688:1680): pid=23845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23846 suid=74 rport=39318 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1760167520.744:1681): pid=23845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1760167520.760:1682): pid=23845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760167520.760:1683): pid=23845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f9:f9:2d:84:9b:11:98:82:1c:1b:5f:64:0d:15:f2:4d:d4:1f:60:57:6e:98:13:17:d5:96:07:15:ae:68:dc:a5 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1760167520.791:1684): pid=23845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760167520.791:1685): pid=23845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23846 suid=74 rport=39318 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1760167520.794:1686): pid=23845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1760167520.794:1687): pid=23845 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=12 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1760167520.794:1687): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd71b43d10 a2=4 a3=3e8 items=0 ppid=1133 pid=23845 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760167520.794:1687): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1760167520.796:1688): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1760167520.814:1689): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1760167520.817:1690): pid=23848 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1760167520.860:1691): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167520.860:1692): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167520.916:1693): pid=23862 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167520.916:1694): pid=23862 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75756D72666E6F777179666178787A6C7674656D6E74626861757A7A6C74646F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167520.917:1695): pid=23862 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167520.920:1696): pid=23862 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=ADD_GROUP msg=audit(1760167528.224:1697): pid=23927 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=984 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="printadmin"
type=GRP_MGMT msg=audit(1760167528.228:1698): pid=23927 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=984 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="printadmin"
type=BPF msg=audit(1760167528.892:1699): prog-id=62 op=LOAD
type=BPF msg=audit(1760167528.892:1700): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167528.892:1701): prog-id=63 op=LOAD
type=BPF msg=audit(1760167528.892:1702): prog-id=64 op=LOAD
type=BPF msg=audit(1760167528.892:1703): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167528.892:1704): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167528.894:1705): prog-id=65 op=LOAD
type=BPF msg=audit(1760167528.894:1706): prog-id=66 op=LOAD
type=BPF msg=audit(1760167528.894:1707): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167528.894:1708): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167528.895:1709): prog-id=67 op=LOAD
type=BPF msg=audit(1760167528.895:1710): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167528.896:1711): prog-id=68 op=LOAD
type=BPF msg=audit(1760167528.896:1712): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167528.896:1713): prog-id=69 op=LOAD
type=BPF msg=audit(1760167528.896:1714): prog-id=70 op=LOAD
type=BPF msg=audit(1760167528.896:1715): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167528.896:1716): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167528.898:1717): prog-id=71 op=LOAD
type=BPF msg=audit(1760167528.898:1718): prog-id=0 op=UNLOAD
type=MAC_POLICY_LOAD msg=audit(1760167537.237:1719): auid=1000 ses=12 lsm=selinux res=1AUID="zuul"
type=SYSCALL msg=audit(1760167537.237:1719): arch=c000003e syscall=1 success=yes exit=3577633 a0=4 a1=7f6416000000 a2=369721 a3=0 items=0 ppid=23980 pid=23988 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760167537.237:1719): proctitle="/usr/sbin/load_policy"
type=SERVICE_STOP msg=audit(1760167538.715:1720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760167538.747:1721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760167539.757:1722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r67e469d107ce46d38f69d26725d9b895 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760167540.005:1723): prog-id=72 op=LOAD
type=BPF msg=audit(1760167540.005:1724): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167540.005:1725): prog-id=73 op=LOAD
type=BPF msg=audit(1760167540.005:1726): prog-id=74 op=LOAD
type=BPF msg=audit(1760167540.005:1727): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167540.005:1728): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167540.007:1729): prog-id=75 op=LOAD
type=BPF msg=audit(1760167540.007:1730): prog-id=76 op=LOAD
type=BPF msg=audit(1760167540.007:1731): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167540.007:1732): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167540.009:1733): prog-id=77 op=LOAD
type=BPF msg=audit(1760167540.009:1734): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167540.010:1735): prog-id=78 op=LOAD
type=BPF msg=audit(1760167540.010:1736): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167540.010:1737): prog-id=79 op=LOAD
type=BPF msg=audit(1760167540.010:1738): prog-id=80 op=LOAD
type=BPF msg=audit(1760167540.010:1739): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167540.010:1740): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760167540.012:1741): prog-id=81 op=LOAD
type=BPF msg=audit(1760167540.012:1742): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1760167540.060:1743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r811c65a8c9444d7bbfb9cf7068b91026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1760167540.087:1744): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssl-libs-1:3.0.7-18.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.087:1745): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="krb5-libs-1.20.1-9.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.087:1746): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nspr-4.35.0-17.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.087:1747): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-util-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.087:1748): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyasn1-0.4.8-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.087:1749): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyasn1-modules-0.4.8-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.087:1750): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-ldap-3.4.3-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.087:1751): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="cyrus-sasl-gssapi-2.1.27-21.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.087:1752): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="krb5-pkinit-1.20.1-9.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.087:1753): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-gssapi-1.6.9-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.087:1754): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ipa-client-common-4.10.1-12.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.087:1755): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="augeas-libs-1.13.0-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.087:1756): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-qrcode-core-6.1-12.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.087:1757): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyusb-1.0.2-13.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1758): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="samba-common-0:4.17.5-105.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1759): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-sssdconfig-2.8.2-2.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1760): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-dns-2.2.1-2.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1761): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libipa_hbac-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1762): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-libipa_hbac-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1763): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-yubico-1.3.3-7.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1764): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-augeas-0.5.0-25.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1765): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sssd-krb5-common-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1766): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-softokn-freebl-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1767): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-softokn-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1768): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1769): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-sysinit-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1770): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="certmonger-0.79.17-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1771): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-tools-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1772): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="autofs-1:5.1.7-36.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1773): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libkadm5-1.20.1-9.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1774): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="krb5-workstation-1.20.1-9.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1775): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-sss-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1776): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libjose-11-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1777): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sssd-idp-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1778): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-license-32:9.16.23-11.el9_2.8.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1779): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ipa-selinux-4.10.1-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1780): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ipa-common-4.10.1-12.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1781): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-jwcrypto-0.8-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1782): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libuv-1:1.42.0-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1783): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fstrm-0.6.1-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1784): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-libs-32:9.16.23-11.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1785): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-utils-32:9.16.23-11.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.088:1786): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-sss-murmur-2.8.2-5.el9_2.5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.089:1787): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-ipalib-4.10.1-12.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.089:1788): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-ipaclient-4.10.1-12.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.089:1789): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sssd-dbus-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.089:1790): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sssd-tools-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.089:1791): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libsss_autofs-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.089:1792): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="avahi-libs-0.8-12.el9_2.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.089:1793): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libwbclient-0:4.17.5-105.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.089:1794): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="samba-common-libs-0:4.17.5-105.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.089:1795): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="samba-client-libs-0:4.17.5-105.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.089:1796): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sssd-common-pac-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.089:1797): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sssd-ipa-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.089:1798): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ipa-client-4.10.1-12.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1760167540.089:1799): pid=23864 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssl-1:3.0.7-18.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=USER_END msg=audit(1760167541.132:1800): pid=23862 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167541.132:1801): pid=23862 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167541.137:1802): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167541.137:1803): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1760167541.185:1804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760167541.185:1805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760167541.188:1806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r67e469d107ce46d38f69d26725d9b895 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760167541.189:1807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r811c65a8c9444d7bbfb9cf7068b91026 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1760167549.580:1808): pid=25962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=25963 suid=74 rport=60626 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.137.73.221 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760167549.580:1809): pid=25962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=25963 suid=74 rport=60626 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.137.73.221 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1760167559.537:1810): pid=25962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25963 suid=74 rport=60626 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=3.137.73.221 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1760167559.538:1811): pid=25962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=3.137.73.221 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1760167585.982:1812): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167585.982:1813): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760167586.012:1814): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167586.012:1815): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167586.020:1816): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167586.020:1817): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760167586.055:1818): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167586.055:1819): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167586.077:1820): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167586.077:1821): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167586.142:1822): pid=26009 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167586.142:1823): pid=26009 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7072706D73716A6F707575626C677A626D656A7565637376736F6D6B72617263203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167586.143:1824): pid=26009 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167586.150:1825): pid=26009 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167586.337:1826): pid=26009 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167586.338:1827): pid=26009 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167586.342:1828): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167586.342:1829): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167586.360:1830): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167586.360:1831): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760167586.396:1832): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167586.396:1833): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167586.411:1834): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167586.411:1835): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760167586.441:1836): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167586.442:1837): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167586.452:1838): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167586.452:1839): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167586.510:1840): pid=26054 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167586.510:1841): pid=26054 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6B6E786D66727478627A6976726563766D7A66736D776561666E736A627678203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167586.511:1842): pid=26054 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167586.514:1843): pid=26054 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167586.688:1844): pid=26054 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167586.688:1845): pid=26054 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167586.692:1846): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167586.692:1847): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167586.709:1848): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167586.709:1849): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760167586.735:1850): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167586.735:1851): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167588.768:1852): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167588.768:1853): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167588.826:1854): pid=26084 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167588.827:1855): pid=26084 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A69756E666E6A6B6C7967616B7170766563627179767268616A736B63767573203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167588.827:1856): pid=26084 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167588.830:1857): pid=26084 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167588.999:1858): pid=26084 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167588.999:1859): pid=26084 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167589.003:1860): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167589.003:1861): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760167590.598:1862): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760167590.598:1863): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760167590.657:1864): pid=26102 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760167590.657:1865): pid=26102 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6272786D7968757A696D6B6C6772736F676C647668687572706C7771616F7176203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760167590.658:1866): pid=26102 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760167590.660:1867): pid=26102 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167590.836:1868): pid=26102 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760167590.836:1869): pid=26102 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760167590.840:1870): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760167590.840:1871): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1760167650.904:1872): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23848 suid=1000 rport=39318 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1760167650.907:1873): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1760167650.908:1874): pid=23845 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1760169315.000:1875): pid=26119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26120 suid=74 rport=35946 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760169315.001:1876): pid=26119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26120 suid=74 rport=35946 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1760169315.065:1877): pid=26119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760169315.065:1878): pid=26119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f9:f9:2d:84:9b:11:98:82:1c:1b:5f:64:0d:15:f2:4d:d4:1f:60:57:6e:98:13:17:d5:96:07:15:ae:68:dc:a5 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1760169315.095:1879): pid=26119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760169315.095:1880): pid=26119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26120 suid=74 rport=35946 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1760169315.098:1881): pid=26119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1760169315.098:1882): pid=26119 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=13 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1760169315.098:1882): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd7f4b21e0 a2=4 a3=3e8 items=0 ppid=24000 pid=26119 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169315.098:1882): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1760169315.099:1883): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1760169315.117:1884): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1760169315.120:1885): pid=26122 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1760169315.163:1886): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760169315.163:1887): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760169315.197:1888): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760169315.197:1889): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760169315.239:1890): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760169315.239:1891): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760169315.326:1892): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760169315.327:1893): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760169315.357:1894): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760169315.357:1895): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760169315.420:1896): pid=26165 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760169315.420:1897): pid=26165 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786261666771637A7A79717372637A75786268786C6877686973687077706F73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760169315.421:1898): pid=26165 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760169315.424:1899): pid=26165 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760169315.597:1900): pid=26165 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760169315.598:1901): pid=26165 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760169315.602:1902): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760169315.602:1903): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760169315.930:1904): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760169315.931:1905): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760169315.964:1906): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760169315.964:1907): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760169316.006:1908): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760169316.006:1909): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760169316.062:1910): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760169316.062:1911): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760169316.104:1912): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760169316.104:1913): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760169316.164:1914): pid=26210 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760169316.164:1915): pid=26210 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727273767761616A767A676378787275696178706D616361726B6C617973756A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760169316.165:1916): pid=26210 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760169316.167:1917): pid=26210 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760169316.463:1918): pid=26210 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760169316.463:1919): pid=26210 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760169316.467:1920): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760169316.467:1921): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760169316.618:1922): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760169316.619:1923): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760169316.670:1924): pid=26230 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760169316.670:1925): pid=26230 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7661756F626A717068766971716A6B766469717873686A756C7A6276706766203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760169316.671:1926): pid=26230 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760169316.673:1927): pid=26230 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=ADD_GROUP msg=audit(1760169316.868:1928): pid=26234 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-group acct="tripleo-admin" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=ADD_USER msg=audit(1760169316.871:1929): pid=26234 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user acct="tripleo-admin" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=USER_MGMT msg=audit(1760169316.931:1930): pid=26234 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-home-dir id=1002 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="tripleo-admin"
type=USER_END msg=audit(1760169316.964:1931): pid=26230 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760169316.964:1932): pid=26230 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760169316.968:1933): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760169316.968:1934): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760169317.150:1935): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760169317.150:1936): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760169317.173:1937): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760169317.174:1938): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760169317.215:1939): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760169317.215:1940): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760169317.246:1941): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760169317.246:1942): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760169317.286:1943): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760169317.286:1944): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760169317.332:1945): pid=26287 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760169317.332:1946): pid=26287 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E67756D727A63666B796D7378706D676166656A746D776E77736B7668726B61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760169317.333:1947): pid=26287 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760169317.335:1948): pid=26287 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760169317.480:1949): pid=26287 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760169317.480:1950): pid=26287 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760169317.484:1951): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760169317.484:1952): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760169317.527:1953): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760169317.527:1954): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760169317.561:1955): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760169317.561:1956): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760169317.603:1957): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760169317.603:1958): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760169317.630:1959): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760169317.630:1960): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760169317.672:1961): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760169317.672:1962): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760169317.733:1963): pid=26330 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760169317.733:1964): pid=26330 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786F69757A6B666373756D76796563616970666F6C77696967626F7161676D6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760169317.734:1965): pid=26330 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760169317.736:1966): pid=26330 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760169317.909:1967): pid=26330 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760169317.909:1968): pid=26330 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760169317.913:1969): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760169317.913:1970): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760169317.955:1971): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760169317.955:1972): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760169317.983:1973): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760169317.983:1974): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760169318.213:1975): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760169318.213:1976): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760169318.271:1977): pid=26360 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760169318.271:1978): pid=26360 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A707666646A68786D71686165797A7077736164756972657261666265716363203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760169318.272:1979): pid=26360 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760169318.274:1980): pid=26360 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760169318.454:1981): pid=26360 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760169318.454:1982): pid=26360 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760169318.457:1983): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760169318.458:1984): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760169318.614:1985): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760169318.614:1986): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760169318.667:1987): pid=26376 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760169318.668:1988): pid=26376 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6F65636364707569687179787A686267656D7A6C71656F756D746A6C6B6470203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760169318.668:1989): pid=26376 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760169318.671:1990): pid=26376 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760169318.844:1991): pid=26376 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760169318.844:1992): pid=26376 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760169318.848:1993): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760169318.848:1994): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760169319.017:1995): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760169319.017:1996): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760169319.079:1997): pid=26392 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760169319.079:1998): pid=26392 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6B73776D756C7A647875686D77766676726863677977796B716C6664656870203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760169319.080:1999): pid=26392 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760169319.082:2000): pid=26392 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760169319.249:2001): pid=26392 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760169319.249:2002): pid=26392 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760169319.253:2003): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760169319.253:2004): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760169319.798:2005): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760169319.798:2006): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1760169319.856:2007): pid=26408 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760169319.856:2008): pid=26408 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786E747A797A617A79767461757071657962626A6A686379666B766E6F78676B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760169319.857:2009): pid=26408 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760169319.860:2010): pid=26408 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760169320.035:2011): pid=26408 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760169320.036:2012): pid=26408 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760169320.040:2013): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760169320.040:2014): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1760169320.518:2015): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760169320.518:2016): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1760169320.714:2017): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760169320.714:2018): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_SESSION msg=audit(1760169331.918:2019): pid=26425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26426 suid=74 rport=33226 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760169331.918:2020): pid=26425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26426 suid=74 rport=33226 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1760169331.980:2021): pid=26425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760169331.980:2022): pid=26425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f9:f9:2d:84:9b:11:98:82:1c:1b:5f:64:0d:15:f2:4d:d4:1f:60:57:6e:98:13:17:d5:96:07:15:ae:68:dc:a5 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1760169332.011:2023): pid=26425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760169332.011:2024): pid=26425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26426 suid=74 rport=33226 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1760169332.012:2025): pid=26425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1760169332.013:2026): pid=26425 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=14 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin"
type=SYSCALL msg=audit(1760169332.013:2026): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe206cbfa0 a2=4 a3=3ea items=0 ppid=24000 pid=26425 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169332.013:2026): proctitle=737368643A20747269706C656F2D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1760169332.014:2027): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1760169332.045:2028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1760169332.066:2029): pid=26429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1760169332.066:2030): pid=26429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1760169332.067:2031): pid=26429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1760169332.067:2032): pid=26429 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=15 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin"
type=SYSCALL msg=audit(1760169332.067:2032): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffc0c54b980 a2=4 a3=3ea items=0 ppid=1 pid=26429 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169332.067:2032): proctitle="(systemd)"
type=USER_START msg=audit(1760169332.069:2033): pid=26429 uid=0 auid=1002 ses=15 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1760169332.192:2034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1760169332.202:2035): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRED_ACQ msg=audit(1760169332.205:2036): pid=26445 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169332.248:2037): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169332.248:2038): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169332.282:2039): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169332.282:2040): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169332.322:2041): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169332.322:2042): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169332.406:2043): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169332.406:2044): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169332.438:2045): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169332.438:2046): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169332.534:2047): pid=26488 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169332.534:2048): pid=26488 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7474776861746E6A62766377777A6A68686268796D666C796F72626D76777162203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169332.534:2049): pid=26488 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169332.539:2050): pid=26488 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169332.829:2051): pid=26488 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169332.829:2052): pid=26488 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169332.833:2053): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169332.833:2054): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169336.962:2055): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169336.962:2056): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169336.997:2057): pid=26508 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169336.998:2058): pid=26508 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E636E6866716267616B7768786C657469616772786F696C666F677366756670203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169336.999:2059): pid=26508 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169337.001:2060): pid=26508 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169337.254:2061): pid=26508 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169337.255:2062): pid=26508 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169337.258:2063): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169337.258:2064): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169337.867:2065): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169337.867:2066): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169337.922:2067): pid=26524 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169337.924:2068): pid=26524 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B75676B6C736D626261657576686177656D6564747A797377766B646962796C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169337.925:2069): pid=26524 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169337.928:2070): pid=26524 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169338.092:2071): pid=26524 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169338.092:2072): pid=26524 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169338.097:2073): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169338.097:2074): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169338.198:2075): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169338.198:2076): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169338.227:2077): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169338.227:2078): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169338.269:2079): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169338.269:2080): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169338.305:2081): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169338.306:2082): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169338.347:2083): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169338.347:2084): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169338.400:2085): pid=26572 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169338.400:2086): pid=26572 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F666A74656F65626E746D6E706D6366796167706B7A766A73787A717A737968203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169338.400:2087): pid=26572 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169338.403:2088): pid=26572 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169338.534:2089): pid=26572 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169338.534:2090): pid=26572 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169338.538:2091): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169338.538:2092): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169338.580:2093): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169338.580:2094): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169338.607:2095): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169338.607:2096): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169338.915:2097): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169338.915:2098): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169338.971:2099): pid=26602 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169338.972:2100): pid=26602 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66796773706E746D756F74786F7262616D71736F6D697A7767717A6D6D757569203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169338.972:2101): pid=26602 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169338.974:2102): pid=26602 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169339.236:2103): pid=26602 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169339.236:2104): pid=26602 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169339.240:2105): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169339.240:2106): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169339.919:2107): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169339.919:2108): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169339.977:2109): pid=26618 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169339.977:2110): pid=26618 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64676D7A7772676373796C686E6D61697463696275746270786675776F6D7163203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169339.978:2111): pid=26618 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169339.981:2112): pid=26618 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169340.149:2113): pid=26618 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169340.149:2114): pid=26618 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169340.153:2115): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169340.153:2116): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169340.366:2117): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169340.367:2118): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169340.430:2119): pid=26634 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169340.431:2120): pid=26634 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716164776F6477726D6D6B69736C73756F726B736D626F77737272757862686E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169340.432:2121): pid=26634 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169340.435:2122): pid=26634 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169340.612:2123): pid=26634 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169340.612:2124): pid=26634 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169340.617:2125): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169340.617:2126): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169340.877:2127): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169340.877:2128): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169340.944:2129): pid=26651 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169340.944:2130): pid=26651 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78756E657477666263716F68736C6178676D6C626674736665697A7777646172203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169340.945:2131): pid=26651 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169340.947:2132): pid=26651 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169341.123:2133): pid=26651 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169341.123:2134): pid=26651 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169341.127:2135): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169341.127:2136): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169341.779:2137): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169341.779:2138): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169341.833:2139): pid=26667 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169341.833:2140): pid=26667 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D716668797A73626875627776776D6B71797970747969776978756478617061203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169341.833:2141): pid=26667 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169341.835:2142): pid=26667 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169342.024:2143): pid=26667 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169342.025:2144): pid=26667 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169342.028:2145): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169342.028:2146): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169342.418:2147): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169342.418:2148): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169342.463:2149): pid=26684 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169342.464:2150): pid=26684 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A79786972656B7977786B6B6977717767767A71746873626774706F6F726E71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169342.464:2151): pid=26684 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169342.466:2152): pid=26684 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169345.485:2153): pid=26686 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rhosp-release-17.1.9-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1760169346.199:2154): pid=26684 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169346.199:2155): pid=26684 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169346.203:2156): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169346.203:2157): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169346.916:2158): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169346.917:2159): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169346.961:2160): pid=26704 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169346.962:2161): pid=26704 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7878796C757161787974696B636A7169776D66746379707267706D70716375203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169346.962:2162): pid=26704 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169346.964:2163): pid=26704 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169347.159:2164): pid=26704 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169347.160:2165): pid=26704 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169347.164:2166): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169347.164:2167): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169347.342:2168): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169347.342:2169): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169347.400:2170): pid=26721 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169347.400:2171): pid=26721 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706C786F72616A666E696D786E6B7474707874616E6A7062646C636661786E75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169347.401:2172): pid=26721 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169347.403:2173): pid=26721 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1760169362.015:2174): prog-id=82 op=LOAD
type=BPF msg=audit(1760169362.015:2175): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169362.015:2176): prog-id=83 op=LOAD
type=BPF msg=audit(1760169362.015:2177): prog-id=84 op=LOAD
type=BPF msg=audit(1760169362.015:2178): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169362.015:2179): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169362.017:2180): prog-id=85 op=LOAD
type=BPF msg=audit(1760169362.017:2181): prog-id=86 op=LOAD
type=BPF msg=audit(1760169362.017:2182): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169362.017:2183): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169362.019:2184): prog-id=87 op=LOAD
type=BPF msg=audit(1760169362.019:2185): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169362.020:2186): prog-id=88 op=LOAD
type=BPF msg=audit(1760169362.020:2187): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169362.020:2188): prog-id=89 op=LOAD
type=BPF msg=audit(1760169362.020:2189): prog-id=90 op=LOAD
type=BPF msg=audit(1760169362.020:2190): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169362.020:2191): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169362.022:2192): prog-id=91 op=LOAD
type=BPF msg=audit(1760169362.022:2193): prog-id=0 op=UNLOAD
type=ADD_GROUP msg=audit(1760169362.907:2194): pid=26939 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="puppet"
type=GRP_MGMT msg=audit(1760169362.915:2195): pid=26939 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="puppet"
type=ADD_USER msg=audit(1760169362.968:2196): pid=26946 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="puppet" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1760169370.315:2197): prog-id=92 op=LOAD
type=BPF msg=audit(1760169370.315:2198): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169370.318:2199): prog-id=93 op=LOAD
type=BPF msg=audit(1760169370.318:2200): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169370.318:2201): prog-id=94 op=LOAD
type=BPF msg=audit(1760169370.318:2202): prog-id=95 op=LOAD
type=BPF msg=audit(1760169370.318:2203): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169370.318:2204): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169370.319:2205): prog-id=96 op=LOAD
type=BPF msg=audit(1760169370.319:2206): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169370.319:2207): prog-id=97 op=LOAD
type=BPF msg=audit(1760169370.319:2208): prog-id=98 op=LOAD
type=BPF msg=audit(1760169370.319:2209): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169370.319:2210): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169370.320:2211): prog-id=99 op=LOAD
type=BPF msg=audit(1760169370.320:2212): prog-id=100 op=LOAD
type=BPF msg=audit(1760169370.320:2213): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169370.320:2214): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169370.321:2215): prog-id=101 op=LOAD
type=BPF msg=audit(1760169370.321:2216): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1760169370.391:2217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=lvm2-monitor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760169370.611:2218): prog-id=102 op=LOAD
type=BPF msg=audit(1760169370.611:2219): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169370.614:2220): prog-id=103 op=LOAD
type=BPF msg=audit(1760169370.614:2221): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169370.614:2222): prog-id=104 op=LOAD
type=BPF msg=audit(1760169370.614:2223): prog-id=105 op=LOAD
type=BPF msg=audit(1760169370.614:2224): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169370.614:2225): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169370.615:2226): prog-id=106 op=LOAD
type=BPF msg=audit(1760169370.615:2227): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169370.615:2228): prog-id=107 op=LOAD
type=BPF msg=audit(1760169370.615:2229): prog-id=108 op=LOAD
type=BPF msg=audit(1760169370.615:2230): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169370.615:2231): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169370.616:2232): prog-id=109 op=LOAD
type=BPF msg=audit(1760169370.616:2233): prog-id=110 op=LOAD
type=BPF msg=audit(1760169370.616:2234): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169370.616:2235): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169370.617:2236): prog-id=111 op=LOAD
type=BPF msg=audit(1760169370.617:2237): prog-id=0 op=UNLOAD
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169373.689:2238): pid=27048 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=modify lport=4444 proto=6 tcontext=system_u:object_r:mysqld_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169374.763:2239): pid=27311 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=modify lport=6653 proto=6 tcontext=system_u:object_r:openvswitch_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169376.290:2240): pid=27318 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=8088 proto=6 tcontext=system_u:object_r:http_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169377.277:2241): pid=27325 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=modify lport=8000 proto=6 tcontext=system_u:object_r:http_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169378.676:2242): pid=27332 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=6639 proto=6 tcontext=system_u:object_r:ovsdb_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169380.156:2243): pid=27338 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=6641 proto=6 tcontext=system_u:object_r:ovsdb_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169381.554:2244): pid=27344 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=6642 proto=6 tcontext=system_u:object_r:ovsdb_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169382.469:2245): pid=27348 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/swift-object-relinker" ftype=any tcontext=system_u:object_r:swift_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169383.463:2246): pid=27353 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/gnocchi/app.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169384.408:2247): pid=27358 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/tftpboot(/.*)?" ftype=any tcontext=system_u:object_r:tftpdir_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169385.339:2248): pid=27363 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/kolla(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169386.256:2249): pid=27368 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/tripleo-config(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169387.243:2250): pid=27373 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/vhost_sockets(/.*)?" ftype=any tcontext=system_u:object_r:virt_cache_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169388.209:2251): pid=27378 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/neutron-rootwrap-daemon" ftype=any tcontext=system_u:object_r:neutron_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169389.165:2252): pid=27383 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/cache/swift(/.*)?" ftype=any tcontext=system_u:object_r:swift_var_cache_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169390.160:2253): pid=27388 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/designate/bind9(/.*)?" ftype=any tcontext=system_u:object_r:named_zone_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169391.141:2254): pid=27393 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/httpboot(/.*)?" ftype=any tcontext=system_u:object_r:httpd_sys_content_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169392.092:2255): pid=27398 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/panko/app.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169393.112:2256): pid=27403 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/nova/.ssh(/.*)?" ftype=any tcontext=system_u:object_r:ssh_home_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169394.039:2257): pid=27408 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/zaqar/zaqar.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169394.982:2258): pid=27413 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/neutron-vpn-agent" ftype=any tcontext=system_u:object_r:neutron_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169395.877:2259): pid=27418 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/pacemaker.log.*" ftype=any tcontext=system_u:object_r:cluster_var_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169396.776:2260): pid=27423 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/swift-object-reconstructor" ftype=any tcontext=system_u:object_r:swift_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169397.672:2261): pid=27430 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/openstack-dashboard" ftype=any tcontext=system_u:object_r:httpd_var_lib_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169399.116:2262): pid=27436 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/aodh/app.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169400.046:2263): pid=27441 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/config-data(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169416.763:2264): bool=httpd_execmem val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169416.763:2264): bool=httpd_can_network_connect val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169416.763:2264): bool=httpd_use_openstack val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169416.763:2264): bool=domain_can_mmap_files val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169416.763:2264): bool=domain_kernel_load_modules val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169416.763:2264): bool=nis_enabled val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169416.763:2264): bool=collectd_tcp_network_connect val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169416.763:2264): bool=glance_api_can_network val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169416.763:2264): bool=glance_use_fusefs val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169416.763:2264): bool=glance_use_execmem val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169416.763:2264): bool=daemons_enable_cluster_mode val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169416.763:2264): bool=neutron_can_network val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169416.763:2264): bool=haproxy_connect_any val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169416.763:2264): bool=rsync_client val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169416.763:2264): bool=rsync_full_access val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169416.763:2264): bool=swift_can_network val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169416.763:2264): bool=virt_use_execmem val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169416.763:2264): bool=virt_use_fusefs val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=SYSCALL msg=audit(1760169416.763:2264): arch=c000003e syscall=1 success=yes exit=2 a0=34 a1=7ffe83cf381e a2=2 a3=0 items=0 ppid=27044 pid=27447 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="semanage" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169416.763:2264): proctitle=2F7573722F62696E2F707974686F6E33002D457349002F7573722F7362696E2F73656D616E61676500696D706F7274002D4E
type=MAC_POLICY_LOAD msg=audit(1760169418.686:2265): auid=1002 ses=14 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1760169418.686:2265): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7f27ed800000 a2=36aa51 a3=0 items=0 ppid=27044 pid=27549 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169418.686:2265): proctitle="/usr/sbin/load_policy"
type=SERVICE_START msg=audit(1760169419.147:2266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rb21c6c2bf74443ad80bbab51f13b7150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760169419.408:2267): prog-id=112 op=LOAD
type=BPF msg=audit(1760169419.408:2268): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169419.412:2269): prog-id=113 op=LOAD
type=BPF msg=audit(1760169419.412:2270): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169419.412:2271): prog-id=114 op=LOAD
type=BPF msg=audit(1760169419.412:2272): prog-id=115 op=LOAD
type=BPF msg=audit(1760169419.412:2273): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169419.412:2274): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169419.413:2275): prog-id=116 op=LOAD
type=BPF msg=audit(1760169419.413:2276): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169419.413:2277): prog-id=117 op=LOAD
type=BPF msg=audit(1760169419.413:2278): prog-id=118 op=LOAD
type=BPF msg=audit(1760169419.413:2279): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169419.413:2280): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169419.414:2281): prog-id=119 op=LOAD
type=BPF msg=audit(1760169419.414:2282): prog-id=120 op=LOAD
type=BPF msg=audit(1760169419.414:2283): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169419.414:2284): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169419.414:2285): prog-id=121 op=LOAD
type=BPF msg=audit(1760169419.414:2286): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1760169419.460:2287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-raf7806ad35ca40e382a695c09e21423a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2288): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-libs-3.0.4-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2289): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-bigdecimal-3.0.0-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2290): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-default-gems-3.0.4-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2291): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-bundler-2.2.33-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2292): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-io-console-0.5.7-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2293): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-json-2.5.1-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2294): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-psych-3.3.2-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2295): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-rdoc-6.3.3-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2296): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygems-3.2.33-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2297): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-3.0.4-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2298): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-regex-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2299): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-system-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2300): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-filesystem-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2301): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-thread-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2302): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libaio-0.3.111-13.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2303): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-chrono-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2304): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-locale-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2305): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="device-mapper-libs-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2306): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="device-mapper-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2307): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="device-mapper-event-libs-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2308): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-psutil-5.8.0-12.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2309): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-simplejson-3.17.5-3.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2310): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-os-service-types-1.7.0-17.1.20230620201222.0b2f473.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2311): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-keystoneauth1-4.4.0-17.1.20240812145234.112bcae.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2312): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="dib-utils-0.0.11-17.1.20230620173328.51661c3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2313): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-refresh-config-13.1.1-17.1.20231020000854.812905b.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2314): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-jeepney-0.6.0-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2315): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-secretstorage-3.3.1-3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2316): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-keyring-21.8.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2317): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pystache-0.5.4-15.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2318): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-apply-config-13.1.1-17.1.20231020001757.3c7f9b9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.510:2319): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="device-mapper-event-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2320): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="lvm2-libs-9:2.03.17-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2321): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="device-mapper-persistent-data-0.9.0-13.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2322): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-fast_gettext-1.2.0-9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2323): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-hocon-1.3.1-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2324): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="hiera-3.6.0-6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2325): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-concurrent-ruby-1.1.5-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2326): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-deep_merge-1.2.1-7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2327): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-multi_json-1.15.0-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2328): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-ruby-shadow-2.5.0-15.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2329): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-semantic_puppet-1.0.4-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2330): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-rexml-3.2.5-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2331): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-augeas-0.5.0-29.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2332): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libselinux-ruby-3.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2333): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libxslt-1.1.34-11.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2334): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-lxml-4.6.5-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2335): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pcp-conf-6.0.1-8.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2336): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pcp-libs-6.0.1-8.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2337): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-mako-1.1.4-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2338): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-dogpile-cache-1.1.5-5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2339): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="oniguruma-6.9.6-1.el9.5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2340): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-wcwidth-0.2.5-8.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2341): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-appdirs-1.4.4-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2342): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="lm_sensors-libs-3.6.0-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2343): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-atomic-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2344): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-log-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2345): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-program-options-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2346): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-nft-services-1.8.8-6.el9_1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2347): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-nowide-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2348): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="leatherman-1.12.6-5.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2349): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="cpp-hocon-0.3.0-7.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2350): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="yaml-cpp-0.6.3-6.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2351): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="facter-1:3.14.19-3.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2352): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-facter-1:3.14.19-3.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2353): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-puppet-resource_api-1.8.13-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2354): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-headless-7.10.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2355): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-7.10.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2356): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-stdlib-6.3.1-17.1.20230621000857.7c1ae25.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2357): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-inifile-4.2.1-17.1.20230620180624.df46d2a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2358): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-concat-6.2.1-17.1.20230620181556.dfeabb9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2359): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-apache-6.5.2-17.1.20230621001106.e4a1532.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2360): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-xinetd-3.3.1-17.1.20230620185435.8d460c4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2361): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-firewall-3.4.1-17.1.20230621022040.94f707c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2362): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-memcached-6.0.0-17.1.20230620184630.4c70dbd.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2363): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-sysctl-0.0.13-17.1.20230620183456.847ec1c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2364): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-rsync-1.1.4-17.1.20230621002829.ea6397e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2365): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-corosync-8.0.1-17.1.20230621104908.6a9da9a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2366): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-mysql-10.6.1-17.1.20230621022141.937d044.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2367): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-systemd-2.12.1-17.1.20230620191611.8f68b0d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2368): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-redis-6.1.1-17.1.20230620191704.547105e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2369): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-openstack_extras-18.5.1-17.1.20230621042409.504e1a0.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2370): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-horizon-18.6.1-17.1.20230621075748.8074e69.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.511:2371): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-pacemaker-1.5.1-17.1.20250214161010.f10ce89.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2372): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-auditd-2.2.1-17.1.20230620192453.189b22b.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2373): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-collectd-13.0.1-17.1.20230620193147.ad138a7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2374): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-dns-8.2.1-17.1.20230621002045.70f5b28.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2375): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-haproxy-4.2.2-17.1.20230620193950.a797b8c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2376): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-keepalived-0.0.2-17.1.20230620194716.bbca37a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2377): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-rsyslog-4.0.1-17.1.20230620200132.2548a0d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2378): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ssh-6.2.1-17.1.20230620190251.6e0f430.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2379): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-fdio-18.2-1.20220727113954.6fd1c8e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2380): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-archive-4.6.1-17.1.20230620181607.bc7e4ff.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2381): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-rabbitmq-11.0.1-17.1.20230620182519.63fee2c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2382): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-openstacklib-18.5.2-17.1.20230621052822.64d8ac6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2383): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-oslo-18.5.1-17.1.20230621052358.fe2a147.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2384): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-keystone-18.6.1-17.1.20250425111017.cb0adcb.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2385): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-glance-18.6.1-17.1.20250220151014.81b081d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2386): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-cinder-18.5.2-17.1.20230621054224.6aa60e7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2387): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-nova-18.6.1-17.1.20230621090443.a21eae4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2388): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-octavia-18.5.1-17.1.20230621062420.842492c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2389): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-manila-18.5.2-17.1.20231102190827.a72a7d5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2390): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ceilometer-18.4.3-17.1.20230927010818.3838907.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2391): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-designate-18.6.1-17.1.20230621061456.f4c0b89.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2392): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-gnocchi-18.4.3-17.1.20230621061020.7584b94.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2393): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-heat-18.4.1-17.1.20230621111632.3b41bb0.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2394): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-placement-5.4.3-17.1.20230621061610.e7557a5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2395): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-swift-18.6.1-17.1.20230621052139.f105ffc.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2396): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-barbican-18.4.2-17.1.20250625204151.af6c77b.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2397): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-aodh-18.4.2-17.1.20230620151218.3e47b5a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2398): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-certmonger-2.7.1-17.1.20230620184730.3e2e660.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2399): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-etcd-1.12.3-17.1.20230620193226.e143c2d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2400): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-git-0.5.0-17.1.20230620193928.4e4498e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2401): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ipaclient-2.5.2-17.1.20230620194626.b086731.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2402): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-nssdb-1.0.2-17.1.20230620185645.2ed2a2d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2403): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-qdr-7.4.1-17.1.20230620195605.8a575de.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2404): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-snmp-3.9.1-17.1.20230620200411.5d73485.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2405): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ovn-18.6.1-17.1.20240925094907.7805f7e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2406): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-kmod-2.5.0-17.1.20230620190646.52e31e3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2407): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-vswitch-14.4.3-17.1.20230621043558.51e82ca.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2408): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-neutron-18.6.1-17.1.20230621053056.c9d467f.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2409): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-module-data-0.5.1-17.1.20230620195419.28dafce.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2410): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-remote-10.0.0-17.1.20230620192417.7420908.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2411): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-vcsrepo-3.1.1-17.1.20230620183456.a36ee18.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2412): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ironic-18.7.1-17.1.20240305210817.edf93f9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2413): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-rsa-4.6-3.1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2414): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-boto-2.45.0-8.1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2415): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="heat-cfntools-1.4.2-6.1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2416): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-munch-2.5.0-6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2417): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-msgpack-1.0.2-4.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2418): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-serialization-4.1.1-17.1.20230621011445.bbe5d5a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.512:2419): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-keystoneclient-1:4.3.0-17.1.20230621025111.d5cb761.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2420): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-swiftclient-3.11.1-17.1.20230620204150.06b36ae.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2421): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-colorama-0.4.4-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2422): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-requestsexceptions-1.4.0-17.1.20230620164652.d7ac0ff.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2423): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-context-3.2.1-17.1.20230620204857.b124eb7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2424): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-log-lang-4.4.0-17.1.20230620205407.9b29c90.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2425): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-log-4.4.0-17.1.20230620205407.9b29c90.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2426): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyperclip-1.8.0-3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2427): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cmd2-1.4.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2428): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cliff-3.7.0-17.1.20230620172206.117a100.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2429): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-jmespath-0.10.0-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2430): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-openstacksdk-0.55.1-17.1.20250516211008.f09ed4a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2431): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-osc-lib-2.3.1-17.1.20230620203400.2b7a679.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2432): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heatclient-2.3.1-17.1.20230621012952.d16c245.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2433): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-zaqarclient-2.4.0-17.1.20230620214253.e388947.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2434): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-collect-config-13.1.1-17.1.20231020001748.76173d8.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2435): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2436): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-ansible-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2437): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-apply-config-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2438): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-docker-cmd-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2439): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-hiera-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2440): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-json-file-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2441): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-puppet-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2442): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="glibc-langpack-en-2.34-60.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2443): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-tripleo-14.2.3-17.1.20250320101351.40278e1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2444): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-heat-agents-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2445): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sysstat-12.5.4-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2446): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="jq-1.6-14.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2447): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="lvm2-9:2.03.17-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2448): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="tmpwatch-2.11-20.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2449): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="driverctl-0.111-2.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169419.513:2450): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-selinux-0.8.37-17.1.20231107080825.05dd1b2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1760169420.027:2451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760169420.027:2452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760169420.030:2453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rb21c6c2bf74443ad80bbab51f13b7150 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760169420.031:2454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-raf7806ad35ca40e382a695c09e21423a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760169420.480:2455): pid=26721 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169420.480:2456): pid=26721 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169420.485:2457): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169420.485:2458): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169421.978:2459): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169421.978:2460): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169422.025:2461): pid=28480 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169422.026:2462): pid=28480 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D647A76777073686E7A64627A706D6E66696275667170667A6771716565636E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169422.027:2463): pid=28480 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169422.033:2464): pid=28480 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169422.912:2465): pid=28480 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169422.913:2466): pid=28480 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169422.916:2467): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169422.916:2468): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169423.425:2469): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169423.425:2470): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169423.475:2471): pid=28619 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169423.475:2472): pid=28619 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D797771627168796D6676776B6A6D7669636D637A6563637A6B72697967667461203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169423.475:2473): pid=28619 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169423.478:2474): pid=28619 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1760169423.995:2475): prog-id=122 op=LOAD
type=BPF msg=audit(1760169423.995:2476): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169423.998:2477): prog-id=123 op=LOAD
type=BPF msg=audit(1760169423.998:2478): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169423.998:2479): prog-id=124 op=LOAD
type=BPF msg=audit(1760169423.998:2480): prog-id=125 op=LOAD
type=BPF msg=audit(1760169423.998:2481): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169423.998:2482): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169423.999:2483): prog-id=126 op=LOAD
type=BPF msg=audit(1760169423.999:2484): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169423.999:2485): prog-id=127 op=LOAD
type=BPF msg=audit(1760169423.999:2486): prog-id=128 op=LOAD
type=BPF msg=audit(1760169423.999:2487): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169423.999:2488): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169423.999:2489): prog-id=129 op=LOAD
type=BPF msg=audit(1760169423.999:2490): prog-id=130 op=LOAD
type=BPF msg=audit(1760169423.999:2491): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169423.999:2492): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169424.000:2493): prog-id=131 op=LOAD
type=BPF msg=audit(1760169424.000:2494): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1760169424.020:2495): pid=28619 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169424.020:2496): pid=28619 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169424.023:2497): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169424.023:2498): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169425.212:2499): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169425.212:2500): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169425.263:2501): pid=28673 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169425.264:2502): pid=28673 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736C6B71766C6F6F756D79636A71786A6B796864746B7A7573786E726C767463203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169425.264:2503): pid=28673 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169425.268:2504): pid=28673 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169425.460:2505): pid=28673 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169425.460:2506): pid=28673 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169425.464:2507): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169425.464:2508): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169425.676:2509): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169425.676:2510): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169425.735:2511): pid=28689 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169425.736:2512): pid=28689 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6A636D626E69666C676972726B78706B777762776B777A707163656E6C7472203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169425.737:2513): pid=28689 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169425.740:2514): pid=28689 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169425.923:2515): pid=28689 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169425.923:2516): pid=28689 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169425.926:2517): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169425.926:2518): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169426.280:2519): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169426.280:2520): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169426.329:2521): pid=28706 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169426.329:2522): pid=28706 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626473727A63696E6878657A646863777478656E6F79786E6371697665646463203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169426.330:2523): pid=28706 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169426.332:2524): pid=28706 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169426.639:2525): pid=28706 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169426.639:2526): pid=28706 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169426.643:2527): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169426.643:2528): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169426.955:2529): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169426.955:2530): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169427.020:2531): pid=28724 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169427.020:2532): pid=28724 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7A6F6464646C717577767A7078696A6F6A6D6263646F766B6965696572736D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169427.021:2533): pid=28724 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169427.024:2534): pid=28724 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169427.207:2535): pid=28724 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169427.207:2536): pid=28724 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169427.211:2537): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169427.211:2538): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169427.336:2539): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169427.336:2540): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169427.397:2541): pid=28742 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169427.397:2542): pid=28742 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637064747561686C716D68776F6E6F73737A686A6F6A6E6F776F6174687A646B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169427.398:2543): pid=28742 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169427.401:2544): pid=28742 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169427.580:2545): pid=28742 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169427.580:2546): pid=28742 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169427.584:2547): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169427.584:2548): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169427.758:2549): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169427.758:2550): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169427.821:2551): pid=28760 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169427.821:2552): pid=28760 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706C787674797161706C76717A6C6963786F67777870686A637063667766796E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169427.822:2553): pid=28760 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169427.824:2554): pid=28760 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169428.163:2555): pid=28760 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169428.164:2556): pid=28760 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169428.168:2557): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169428.168:2558): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169428.368:2559): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169428.368:2560): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169428.431:2561): pid=28779 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169428.432:2562): pid=28779 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726D7A6D69637A716E726372727978617173667969656D6F62697967726A7369203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169428.432:2563): pid=28779 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169428.435:2564): pid=28779 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169428.629:2565): pid=28779 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169428.629:2566): pid=28779 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169428.633:2567): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169428.633:2568): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169428.947:2569): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169428.947:2570): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169429.009:2571): pid=28796 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169429.009:2572): pid=28796 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6477637A726B78696E716663726875696D6A6969797361786B6E66736865626A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169429.010:2573): pid=28796 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169429.013:2574): pid=28796 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169429.203:2575): pid=28796 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169429.203:2576): pid=28796 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169429.207:2577): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169429.207:2578): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169429.318:2579): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169429.318:2580): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169429.381:2581): pid=28814 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169429.381:2582): pid=28814 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7465646C70767066656B6F63727165616466696B657672626B636964616E6E6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169429.382:2583): pid=28814 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169429.384:2584): pid=28814 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169429.541:2585): pid=28814 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169429.542:2586): pid=28814 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169429.546:2587): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169429.546:2588): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169429.712:2589): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169429.712:2590): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169429.769:2591): pid=28830 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169429.769:2592): pid=28830 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626A757365786A776F66736D67616C706766727A626B64777673696A766A7A6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169429.770:2593): pid=28830 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169429.773:2594): pid=28830 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169429.955:2595): pid=28830 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169429.956:2596): pid=28830 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169429.959:2597): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169429.959:2598): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169430.425:2599): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169430.425:2600): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169430.490:2601): pid=28846 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169430.490:2602): pid=28846 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6168626878767577766D7172646567656978756F71726B74646664636F636267203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169430.491:2603): pid=28846 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169430.493:2604): pid=28846 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169430.653:2605): pid=28846 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169430.654:2606): pid=28846 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169430.658:2607): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169430.658:2608): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169430.840:2609): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169430.840:2610): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169430.890:2611): pid=28862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169430.891:2612): pid=28862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62786377756E796F6B74617365667661767363767167787063636A6D79687073203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169430.891:2613): pid=28862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169430.894:2614): pid=28862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169431.054:2615): pid=28862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169431.054:2616): pid=28862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169431.059:2617): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169431.059:2618): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169431.674:2619): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169431.675:2620): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169431.738:2621): pid=28878 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169431.739:2622): pid=28878 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677A75626D786863676D67656E79786A6B6D626B78737A737A67666B6C787775203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169431.739:2623): pid=28878 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169431.742:2624): pid=28878 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169431.914:2625): pid=28878 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169431.914:2626): pid=28878 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169431.918:2627): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169431.918:2628): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169432.088:2629): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169432.088:2630): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169432.140:2631): pid=28894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169432.140:2632): pid=28894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6C6E75727171616B6A7875676C666F716B626E6D71736C6367796A78756F7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169432.141:2633): pid=28894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169432.143:2634): pid=28894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169432.279:2635): pid=28894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169432.279:2636): pid=28894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169432.284:2637): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169432.284:2638): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169432.538:2639): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169432.539:2640): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169432.601:2641): pid=28912 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169432.602:2642): pid=28912 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A61616B6A6C77696972746C636D676F6C6E67616469786D6D73666E64676E6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169432.602:2643): pid=28912 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169432.605:2644): pid=28912 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169432.784:2645): pid=28912 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169432.785:2646): pid=28912 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169432.789:2647): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169432.789:2648): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169433.394:2649): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169433.395:2650): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169433.441:2651): pid=28928 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169433.442:2652): pid=28928 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7665666B637666676B6E676D6575656D747466796179786F6A6E616C70696170203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169433.442:2653): pid=28928 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169433.444:2654): pid=28928 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169433.626:2655): pid=28928 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169433.627:2656): pid=28928 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169433.633:2657): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169433.633:2658): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169433.740:2659): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169433.740:2660): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169433.800:2661): pid=28944 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169433.800:2662): pid=28944 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7671646868636169626E736E776572736F796F667A6B726866627A6B65676E6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169433.801:2663): pid=28944 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169433.803:2664): pid=28944 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169433.993:2665): pid=28944 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169433.993:2666): pid=28944 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169433.997:2667): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169433.997:2668): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169434.097:2669): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169434.097:2670): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169434.150:2671): pid=28962 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169434.151:2672): pid=28962 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666978656E70786368616171766C6E756B667368616865726B786D67676F6170203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169434.151:2673): pid=28962 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169434.154:2674): pid=28962 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169434.328:2675): pid=28962 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169434.328:2676): pid=28962 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169434.331:2677): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169434.331:2678): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169434.552:2679): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169434.552:2680): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169434.603:2681): pid=28981 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169434.603:2682): pid=28981 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B646778736777716767646D786B617079746F6C6C6D746A6F72697464657863203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169434.603:2683): pid=28981 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169434.606:2684): pid=28981 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169434.770:2685): pid=28981 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169434.770:2686): pid=28981 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169434.774:2687): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169434.774:2688): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169434.929:2689): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169434.929:2690): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169434.982:2691): pid=28997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169434.982:2692): pid=28997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6179717A67737675646578627277766570716F636F6F6A726C67757864737963203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169434.983:2693): pid=28997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169434.986:2694): pid=28997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169435.158:2695): pid=28997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169435.159:2696): pid=28997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169435.162:2697): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169435.162:2698): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169435.291:2699): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169435.291:2700): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169435.320:2701): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169435.320:2702): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169435.362:2703): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169435.362:2704): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169435.400:2705): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169435.400:2706): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169435.440:2707): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169435.441:2708): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169435.503:2709): pid=29045 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169435.504:2710): pid=29045 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7777706971647A65696962726A70666F71726F76617467666B67727A72747879203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169435.504:2711): pid=29045 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169435.507:2712): pid=29045 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169435.676:2713): pid=29045 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169435.676:2714): pid=29045 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169435.680:2715): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169435.680:2716): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169435.720:2717): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169435.721:2718): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169435.751:2719): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169435.751:2720): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169435.791:2721): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169435.792:2722): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169435.819:2723): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169435.819:2724): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169435.860:2725): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169435.860:2726): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169435.919:2727): pid=29088 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169435.919:2728): pid=29088 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757875726E6B636E656C7A76676E616C6571647962717874646B666F796B6264203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169435.920:2729): pid=29088 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169435.923:2730): pid=29088 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169436.091:2731): pid=29088 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169436.091:2732): pid=29088 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169436.095:2733): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169436.095:2734): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169436.137:2735): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169436.137:2736): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169436.166:2737): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169436.166:2738): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169437.037:2739): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169437.037:2740): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169437.092:2741): pid=29118 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169437.093:2742): pid=29118 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697469796962746A7A6C77637362676C756561746671706C6D696A6871667961203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169437.093:2743): pid=29118 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169437.096:2744): pid=29118 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169437.345:2745): pid=29118 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169437.345:2746): pid=29118 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169437.352:2747): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169437.352:2748): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169437.487:2749): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169437.487:2750): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169437.546:2751): pid=29135 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169437.546:2752): pid=29135 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666F6E7666626A686C75656264656D636F706776776D72727775796969616973203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169437.547:2753): pid=29135 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169437.549:2754): pid=29135 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1760169441.046:2755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra0d4fd108f7b44acb57c7ebd332baec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760169441.308:2756): prog-id=132 op=LOAD
type=BPF msg=audit(1760169441.308:2757): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169441.311:2758): prog-id=133 op=LOAD
type=BPF msg=audit(1760169441.311:2759): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169441.311:2760): prog-id=134 op=LOAD
type=BPF msg=audit(1760169441.311:2761): prog-id=135 op=LOAD
type=BPF msg=audit(1760169441.311:2762): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169441.311:2763): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169441.312:2764): prog-id=136 op=LOAD
type=BPF msg=audit(1760169441.312:2765): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169441.312:2766): prog-id=137 op=LOAD
type=BPF msg=audit(1760169441.312:2767): prog-id=138 op=LOAD
type=BPF msg=audit(1760169441.312:2768): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169441.312:2769): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169441.313:2770): prog-id=139 op=LOAD
type=BPF msg=audit(1760169441.313:2771): prog-id=140 op=LOAD
type=BPF msg=audit(1760169441.313:2772): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169441.313:2773): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169441.313:2774): prog-id=141 op=LOAD
type=BPF msg=audit(1760169441.313:2775): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1760169441.391:2776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760169441.470:2777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760169441.470:2778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760169441.472:2779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra0d4fd108f7b44acb57c7ebd332baec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760169442.754:2780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760169442.786:2781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rbfe7d1ebf55840a09e95b1aaaaa654e7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1760169442.789:2782): pid=29137 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="tuned-2.25.1-1.7.20250812gitdf64818e.el9fdp.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169442.789:2783): pid=29137 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="tuned-profiles-cpu-partitioning-2.25.1-1.7.20250812gitdf64818e.el9fdp.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1760169443.035:2784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760169443.035:2785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760169443.036:2786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rbfe7d1ebf55840a09e95b1aaaaa654e7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760169443.643:2787): pid=29135 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169443.644:2788): pid=29135 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169443.648:2789): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169443.648:2790): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169443.765:2791): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169443.765:2792): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169443.827:2793): pid=29580 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169443.827:2794): pid=29580 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787372666D79736F6B6D6575757A696661696C70666C7264667864676D6A6D66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169443.828:2795): pid=29580 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169443.833:2796): pid=29580 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1760169444.191:2797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760169445.543:2798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760169445.571:2799): pid=29580 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169445.572:2800): pid=29580 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169445.576:2801): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169445.576:2802): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169445.672:2803): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169445.673:2804): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169445.736:2805): pid=29776 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169445.736:2806): pid=29776 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C67666762766174707A6E636B6E737075767A676265716A756E6A6D796D6369203B20504154483D2F62696E3A2F7573722F62696E3A2F7362696E3A2F7573722F7362696E202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169445.736:2807): pid=29776 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169445.739:2808): pid=29776 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169445.908:2809): pid=29776 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169445.908:2810): pid=29776 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169445.912:2811): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169445.912:2812): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169446.408:2813): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169446.408:2814): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169446.468:2815): pid=29793 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169446.468:2816): pid=29793 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646F6A726278686C71796B697A72706C6F736B6E6371757A7468616369637361203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169446.469:2817): pid=29793 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169446.472:2818): pid=29793 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169446.638:2819): pid=29793 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169446.638:2820): pid=29793 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169446.642:2821): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169446.642:2822): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169446.793:2823): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169446.793:2824): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169446.853:2825): pid=29809 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169446.853:2826): pid=29809 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716F6F6167616364797765627177777370687064627663686F66796B6468716E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169446.854:2827): pid=29809 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169446.856:2828): pid=29809 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169447.016:2829): pid=29809 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169447.016:2830): pid=29809 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169447.020:2831): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169447.020:2832): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169447.365:2833): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169447.365:2834): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169447.421:2835): pid=29825 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169447.422:2836): pid=29825 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637375637A787A6A77776476716D6D796A786D79757771787467647671666571203B20504154483D2F62696E3A2F7573722F62696E3A2F7362696E3A2F7573722F7362696E202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169447.422:2837): pid=29825 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169447.424:2838): pid=29825 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169448.773:2839): pid=29825 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169448.773:2840): pid=29825 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169448.777:2841): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169448.777:2842): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169449.130:2843): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169449.130:2844): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169449.189:2845): pid=29845 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169449.189:2846): pid=29845 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627277776C676162697A627070626C7679746A6F7070666E7263737461686565203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169449.190:2847): pid=29845 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169449.193:2848): pid=29845 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169449.374:2849): pid=29845 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169449.375:2850): pid=29845 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169449.378:2851): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169449.378:2852): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169449.510:2853): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169449.510:2854): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169449.569:2855): pid=29862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169449.570:2856): pid=29862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796D6474637276717A696B6F74727A6868716878706B636463767570746F6A6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169449.570:2857): pid=29862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169449.572:2858): pid=29862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169449.733:2859): pid=29862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169449.733:2860): pid=29862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169449.736:2861): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169449.736:2862): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169451.526:2863): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169451.527:2864): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169451.585:2865): pid=29878 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169451.585:2866): pid=29878 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7073716871747678626B756867657864657073616A7961776D62727772626E69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169451.586:2867): pid=29878 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169451.589:2868): pid=29878 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169451.736:2869): pid=29878 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169451.737:2870): pid=29878 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169451.740:2871): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169451.740:2872): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169457.975:2873): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169457.975:2874): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169458.033:2875): pid=29894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169458.033:2876): pid=29894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737668646C7273727A616761636D64637469696965736E716C7964746D646F78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169458.034:2877): pid=29894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169458.037:2878): pid=29894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169458.218:2879): pid=29894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169458.218:2880): pid=29894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169458.222:2881): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169458.222:2882): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169458.346:2883): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169458.346:2884): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169458.378:2885): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169458.378:2886): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169458.419:2887): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169458.420:2888): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169458.454:2889): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169458.455:2890): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169458.496:2891): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169458.497:2892): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169458.537:2893): pid=29942 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169458.538:2894): pid=29942 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A77766C6F79796A656E78686D707A676A64666674696F616172756277627562203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169458.538:2895): pid=29942 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169458.540:2896): pid=29942 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169458.682:2897): pid=29942 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169458.682:2898): pid=29942 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169458.686:2899): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169458.686:2900): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169458.728:2901): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169458.728:2902): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169458.758:2903): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169458.758:2904): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169458.798:2905): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169458.799:2906): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169458.826:2907): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169458.826:2908): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169458.867:2909): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169458.867:2910): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169458.918:2911): pid=29987 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169458.919:2912): pid=29987 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F687A737A6A76646572707261727068676264736E796C7A796465646F676862203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169458.919:2913): pid=29987 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169458.922:2914): pid=29987 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169459.105:2915): pid=29987 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169459.105:2916): pid=29987 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169459.110:2917): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169459.110:2918): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169459.151:2919): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169459.151:2920): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169459.181:2921): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169459.181:2922): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169459.365:2923): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169459.366:2924): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169459.423:2925): pid=30017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169459.423:2926): pid=30017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63776E6D7A6F6566746F6F6274657265716E717A776F6D7765696A6C61677A7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169459.424:2927): pid=30017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169459.426:2928): pid=30017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169459.600:2929): pid=30017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169459.601:2930): pid=30017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169459.605:2931): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169459.605:2932): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169459.819:2933): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169459.819:2934): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169459.851:2935): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169459.851:2936): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169459.891:2937): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169459.892:2938): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169459.925:2939): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169459.926:2940): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169459.968:2941): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169459.968:2942): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169460.024:2943): pid=30065 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169460.025:2944): pid=30065 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62706969716376726F647A72676C6A6A6F6B6E786A61757A677371746F647467203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169460.025:2945): pid=30065 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169460.028:2946): pid=30065 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169460.186:2947): pid=30065 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169460.186:2948): pid=30065 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169460.190:2949): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169460.190:2950): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169460.230:2951): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169460.231:2952): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169460.254:2953): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169460.255:2954): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169460.295:2955): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169460.295:2956): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169460.320:2957): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169460.320:2958): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169460.361:2959): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169460.361:2960): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169460.414:2961): pid=30108 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169460.414:2962): pid=30108 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767776626578697666626E6D73626D656270627576757664617772776D67696B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169460.414:2963): pid=30108 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169460.416:2964): pid=30108 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169460.599:2965): pid=30108 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169460.599:2966): pid=30108 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169460.603:2967): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169460.603:2968): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169460.645:2969): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169460.645:2970): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169460.672:2971): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169460.672:2972): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169460.771:2973): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169460.771:2974): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169460.798:2975): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169460.799:2976): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169460.840:2977): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169460.840:2978): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169460.872:2979): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169460.872:2980): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169460.947:2981): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169460.947:2982): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169460.999:2983): pid=30170 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169461.000:2984): pid=30170 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79747477666878676A786678706B627569776C7676656B696E766B6164727273203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169461.001:2985): pid=30170 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169461.004:2986): pid=30170 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169461.149:2987): pid=30170 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169461.150:2988): pid=30170 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169461.154:2989): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169461.154:2990): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169461.194:2991): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169461.194:2992): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169461.233:2993): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169461.233:2994): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169461.274:2995): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169461.275:2996): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169461.305:2997): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169461.305:2998): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169461.346:2999): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169461.346:3000): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169461.409:3001): pid=30213 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169461.410:3002): pid=30213 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646A716F7A77636277706C61636C75776A6E6A7A747A726C76706C736F72736D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169461.410:3003): pid=30213 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169461.413:3004): pid=30213 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169461.589:3005): pid=30213 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169461.590:3006): pid=30213 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169461.594:3007): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169461.594:3008): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169461.635:3009): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169461.635:3010): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169461.664:3011): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169461.664:3012): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169461.731:3013): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169461.731:3014): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169461.762:3015): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169461.763:3016): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169461.804:3017): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169461.804:3018): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169461.840:3019): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169461.840:3020): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169462.022:3021): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169462.023:3022): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169462.080:3023): pid=30275 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169462.080:3024): pid=30275 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657A6C666C656D6777617667756B656B7375727064647A756765766665616F7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169462.081:3025): pid=30275 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169462.084:3026): pid=30275 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169462.207:3027): pid=30275 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169462.208:3028): pid=30275 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169462.212:3029): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169462.212:3030): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169462.254:3031): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169462.254:3032): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169462.291:3033): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169462.291:3034): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169462.333:3035): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169462.333:3036): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169462.366:3037): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169462.366:3038): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169462.408:3039): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169462.408:3040): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169462.522:3041): pid=30318 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169462.522:3042): pid=30318 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7571677165726D66717964757868646F6862727668637A6D796F696471616E71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169462.523:3043): pid=30318 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169462.526:3044): pid=30318 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169462.694:3045): pid=30318 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169462.694:3046): pid=30318 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169462.699:3047): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169462.699:3048): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169462.741:3049): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169462.741:3050): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169462.770:3051): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169462.770:3052): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169462.838:3053): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169462.838:3054): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169462.867:3055): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169462.867:3056): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169462.908:3057): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169462.909:3058): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169462.948:3059): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169462.948:3060): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169463.122:3061): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169463.123:3062): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169463.181:3063): pid=30380 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169463.181:3064): pid=30380 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6572776F797262767561696D67656C69687578676C6C62707967617466676E6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169463.182:3065): pid=30380 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169463.184:3066): pid=30380 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169463.349:3067): pid=30380 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169463.349:3068): pid=30380 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169463.353:3069): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169463.353:3070): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169463.396:3071): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169463.396:3072): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169463.434:3073): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169463.434:3074): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169463.475:3075): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169463.475:3076): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169463.507:3077): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169463.507:3078): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169463.548:3079): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169463.548:3080): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169463.608:3081): pid=30423 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169463.608:3082): pid=30423 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6773667168726275786D747A68787770697269656C6B64726961617666677564203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169463.609:3083): pid=30423 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169463.612:3084): pid=30423 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169463.780:3085): pid=30423 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169463.781:3086): pid=30423 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169463.784:3087): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169463.784:3088): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169463.827:3089): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169463.827:3090): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169463.861:3091): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169463.861:3092): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169463.931:3093): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169463.931:3094): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169463.958:3095): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169463.958:3096): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169464.000:3097): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169464.000:3098): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169464.034:3099): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169464.034:3100): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169464.076:3101): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169464.076:3102): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169464.132:3103): pid=30485 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169464.133:3104): pid=30485 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67666C6F787179727579776E786E726472736B6D7566666C637A796B7979626A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169464.133:3105): pid=30485 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169464.135:3106): pid=30485 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169464.293:3107): pid=30485 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169464.293:3108): pid=30485 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169464.297:3109): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169464.297:3110): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169464.339:3111): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169464.339:3112): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169464.372:3113): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169464.373:3114): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169464.414:3115): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169464.414:3116): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169464.442:3117): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169464.442:3118): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169464.484:3119): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169464.484:3120): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169464.547:3121): pid=30528 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169464.548:3122): pid=30528 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66677161727778757265766D6263616C766B63797373656978766F64656C6E7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169464.548:3123): pid=30528 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169464.551:3124): pid=30528 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169464.730:3125): pid=30528 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169464.730:3126): pid=30528 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169464.734:3127): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169464.734:3128): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169464.775:3129): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169464.776:3130): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169464.804:3131): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169464.804:3132): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169464.849:3133): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169464.849:3134): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169464.876:3135): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169464.876:3136): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169464.917:3137): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169464.918:3138): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169464.950:3139): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169464.950:3140): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169465.034:3141): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169465.034:3142): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169465.093:3143): pid=30590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169465.093:3144): pid=30590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6D6F657463776B6D787477656267786F7474726C637262696D69776C726C63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169465.093:3145): pid=30590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169465.096:3146): pid=30590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169465.252:3147): pid=30590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169465.252:3148): pid=30590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169465.256:3149): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169465.256:3150): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169465.298:3151): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169465.298:3152): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169465.333:3153): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169465.334:3154): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169465.375:3155): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169465.375:3156): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169465.407:3157): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169465.407:3158): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169465.448:3159): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169465.448:3160): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169465.506:3161): pid=30633 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169465.506:3162): pid=30633 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C616764696D7267676C66657A6B697679777178726D726B726F616867716F6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169465.506:3163): pid=30633 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169465.509:3164): pid=30633 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169465.677:3165): pid=30633 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169465.677:3166): pid=30633 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169465.681:3167): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169465.681:3168): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169465.723:3169): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169465.723:3170): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169465.755:3171): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169465.755:3172): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169465.824:3173): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169465.825:3174): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169465.853:3175): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169465.853:3176): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169465.894:3177): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169465.894:3178): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169465.929:3179): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169465.929:3180): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169465.973:3181): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169465.973:3182): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169466.035:3183): pid=30695 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169466.036:3184): pid=30695 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666E667973686C7570666D747A74696D7173676A66786C6B766176736A687A7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169466.036:3185): pid=30695 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169466.038:3186): pid=30695 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169466.193:3187): pid=30695 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169466.194:3188): pid=30695 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169466.197:3189): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169466.197:3190): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169466.239:3191): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169466.239:3192): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169466.276:3193): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169466.276:3194): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169466.317:3195): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169466.318:3196): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169466.349:3197): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169466.350:3198): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169466.390:3199): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169466.391:3200): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169466.451:3201): pid=30738 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169466.452:3202): pid=30738 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68786C73666C6D676A736972667A696A626972797565687A746162746F6F7674203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169466.453:3203): pid=30738 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169466.455:3204): pid=30738 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169466.626:3205): pid=30738 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169466.626:3206): pid=30738 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169466.631:3207): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169466.632:3208): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169466.672:3209): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169466.673:3210): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169466.704:3211): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169466.704:3212): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169466.758:3213): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169466.758:3214): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169466.788:3215): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169466.788:3216): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169466.829:3217): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169466.830:3218): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169466.865:3219): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169466.865:3220): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169466.922:3221): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169466.922:3222): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169466.982:3223): pid=30800 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169466.983:3224): pid=30800 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616C756377696378757166666E696E706C766778796668746379636E6277707A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169466.983:3225): pid=30800 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169466.986:3226): pid=30800 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169467.144:3227): pid=30800 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169467.144:3228): pid=30800 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169467.147:3229): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169467.147:3230): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169467.188:3231): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169467.188:3232): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169467.223:3233): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169467.223:3234): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169467.264:3235): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169467.265:3236): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169467.294:3237): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169467.295:3238): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169467.335:3239): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169467.335:3240): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169467.389:3241): pid=30843 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169467.389:3242): pid=30843 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78636C666B716A6A6D696D6B68706B647663786C796D717161707A756269726E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169467.390:3243): pid=30843 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169467.392:3244): pid=30843 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169467.567:3245): pid=30843 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169467.567:3246): pid=30843 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169467.571:3247): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169467.571:3248): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169467.603:3249): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169467.603:3250): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169467.629:3251): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169467.629:3252): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169467.696:3253): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169467.696:3254): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169467.723:3255): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169467.723:3256): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169467.764:3257): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169467.764:3258): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169467.799:3259): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169467.799:3260): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169467.850:3261): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169467.851:3262): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169467.911:3263): pid=30905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169467.911:3264): pid=30905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686F6778736B69666678626368747867746E62686C6C666B776577716A676E64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169467.912:3265): pid=30905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169467.914:3266): pid=30905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169468.083:3267): pid=30905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169468.083:3268): pid=30905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169468.087:3269): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169468.087:3270): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169468.127:3271): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169468.127:3272): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169468.159:3273): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169468.159:3274): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169468.200:3275): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169468.200:3276): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169468.228:3277): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169468.228:3278): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169468.269:3279): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169468.269:3280): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169468.326:3281): pid=30948 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169468.326:3282): pid=30948 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6C6768706B7A7170647A6F6A69697A74696A6C64636464696663746E74646A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169468.327:3283): pid=30948 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169468.329:3284): pid=30948 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169468.505:3285): pid=30948 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169468.505:3286): pid=30948 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169468.508:3287): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169468.508:3288): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169468.559:3289): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169468.559:3290): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169468.582:3291): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169468.582:3292): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169468.654:3293): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169468.654:3294): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169468.677:3295): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169468.677:3296): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169468.718:3297): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169468.719:3298): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169468.753:3299): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169468.753:3300): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169468.803:3301): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169468.803:3302): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169468.858:3303): pid=31010 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169468.858:3304): pid=31010 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706F766D767061676C657171757A667563696F7073736D6E6E65747266616B6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169468.859:3305): pid=31010 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169468.861:3306): pid=31010 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169469.005:3307): pid=31010 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169469.006:3308): pid=31010 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169469.010:3309): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169469.010:3310): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169469.038:3311): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169469.039:3312): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169469.067:3313): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169469.067:3314): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169469.108:3315): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169469.109:3316): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169469.139:3317): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169469.139:3318): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169469.180:3319): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169469.181:3320): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169469.228:3321): pid=31053 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169469.228:3322): pid=31053 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62617065656F647A62666A726469776576636E6F6470646D6F71797772617363203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169469.229:3323): pid=31053 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169469.231:3324): pid=31053 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169469.368:3325): pid=31053 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169469.369:3326): pid=31053 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169469.372:3327): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169469.373:3328): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169469.414:3329): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169469.414:3330): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169469.444:3331): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169469.444:3332): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169469.509:3333): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169469.509:3334): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169469.538:3335): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169469.538:3336): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169469.580:3337): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169469.580:3338): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169469.615:3339): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169469.615:3340): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169469.677:3341): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169469.677:3342): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169469.719:3343): pid=31115 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169469.719:3344): pid=31115 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A64746C70726275776F7374796370756C7A6E6A6D6263776F6E686362656968203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169469.720:3345): pid=31115 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169469.722:3346): pid=31115 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169469.886:3347): pid=31115 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169469.886:3348): pid=31115 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169469.890:3349): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169469.890:3350): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169469.931:3351): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169469.931:3352): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169469.966:3353): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169469.966:3354): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169470.007:3355): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169470.008:3356): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169470.040:3357): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169470.040:3358): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169470.080:3359): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169470.081:3360): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169470.143:3361): pid=31158 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169470.143:3362): pid=31158 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646C796B7A6A7067617A727375727775637568627561646F7078627A68646768203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169470.144:3363): pid=31158 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169470.147:3364): pid=31158 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169470.353:3365): pid=31158 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169470.353:3366): pid=31158 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169470.357:3367): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169470.357:3368): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169470.398:3369): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169470.398:3370): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169470.425:3371): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169470.425:3372): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169470.639:3373): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169470.639:3374): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169470.696:3375): pid=31188 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169470.696:3376): pid=31188 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65746C616F7567776871687A6166627170756A76656E736A7A6A696B6B727A79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169470.697:3377): pid=31188 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169470.700:3378): pid=31188 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169470.866:3379): pid=31188 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169470.866:3380): pid=31188 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169470.870:3381): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169470.870:3382): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169471.444:3383): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169471.444:3384): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169471.471:3385): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169471.471:3386): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169471.511:3387): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169471.511:3388): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169471.547:3389): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169471.548:3390): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169471.588:3391): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169471.588:3392): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169471.632:3393): pid=31236 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169471.632:3394): pid=31236 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676672776A6977727270747A647176687464676A677469686D7A786565667772203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169471.633:3395): pid=31236 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169471.634:3396): pid=31236 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169471.809:3397): pid=31236 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169471.809:3398): pid=31236 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169471.813:3399): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169471.813:3400): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169471.853:3401): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169471.853:3402): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169471.886:3403): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169471.886:3404): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169471.927:3405): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169471.928:3406): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169471.961:3407): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169471.961:3408): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169472.001:3409): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169472.001:3410): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169472.061:3411): pid=31279 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169472.061:3412): pid=31279 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72756F766B69716179726C7A696163796F75746C6777756674667674666B7065203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169472.062:3413): pid=31279 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169472.065:3414): pid=31279 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169472.246:3415): pid=31279 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169472.247:3416): pid=31279 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169472.250:3417): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169472.250:3418): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169472.292:3419): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169472.292:3420): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169472.325:3421): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169472.326:3422): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169476.793:3423): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169476.793:3424): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169476.861:3425): pid=31310 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169476.861:3426): pid=31310 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A66756A726A7670766E70646F656A6E756572676876617868796B7A7A6D6669203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169476.862:3427): pid=31310 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169476.865:3428): pid=31310 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169477.338:3429): pid=31310 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169477.339:3430): pid=31310 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169477.345:3431): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169477.345:3432): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169477.552:3433): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169477.552:3434): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169477.610:3435): pid=31371 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169477.611:3436): pid=31371 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A697562776B776B6A6A76647A626B796862787569617065696D64726566636B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169477.611:3437): pid=31371 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169477.614:3438): pid=31371 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169481.863:3439): pid=31371 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169481.863:3440): pid=31371 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169481.867:3441): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169481.867:3442): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169481.984:3443): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169481.984:3444): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169482.045:3445): pid=31388 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169482.046:3446): pid=31388 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7076777978717168637A6E676366766A6477766C696D6D7463616A67776E6674203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169482.046:3447): pid=31388 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169482.049:3448): pid=31388 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169486.285:3449): pid=31388 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169486.285:3450): pid=31388 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169486.289:3451): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169486.289:3452): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169486.858:3453): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169486.858:3454): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169486.916:3455): pid=31405 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169486.916:3456): pid=31405 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7368636B62626764646472737470716B7372796D7A6467626F7262686177646C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169486.917:3457): pid=31405 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169486.919:3458): pid=31405 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169487.057:3459): pid=31405 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169487.057:3460): pid=31405 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169487.060:3461): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169487.060:3462): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169487.343:3463): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169487.343:3464): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169487.394:3465): pid=31428 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169487.394:3466): pid=31428 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F687A62656C6D766C79707776737861646C7470646F6A796C6B746A61736B78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169487.394:3467): pid=31428 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169487.397:3468): pid=31428 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169491.615:3469): pid=31428 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169491.617:3470): pid=31428 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169491.621:3471): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169491.621:3472): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169491.853:3473): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169491.853:3474): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169491.911:3475): pid=31445 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169491.911:3476): pid=31445 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D77707A746E6D69666D6A6C746C6673666E6E787666686C706B6C6C7A6F7373203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169491.912:3477): pid=31445 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169491.914:3478): pid=31445 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169492.095:3479): pid=31445 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169492.096:3480): pid=31445 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169492.099:3481): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169492.099:3482): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169492.290:3483): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169492.290:3484): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169492.342:3485): pid=31468 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169492.342:3486): pid=31468 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67696F7961687572706B7065766364696D6F726B76787575776C6C7978667770203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169492.343:3487): pid=31468 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169492.347:3488): pid=31468 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169496.591:3489): pid=31468 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169496.591:3490): pid=31468 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169496.595:3491): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169496.595:3492): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169496.713:3493): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169496.713:3494): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169496.765:3495): pid=31485 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169496.765:3496): pid=31485 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726B79736C6F6466786B6D76796D6D74716A6277746A6B6C66636766626B7A6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169496.765:3497): pid=31485 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169496.767:3498): pid=31485 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169501.048:3499): pid=31485 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169501.049:3500): pid=31485 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169501.052:3501): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169501.052:3502): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169501.227:3503): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169501.227:3504): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169501.284:3505): pid=31502 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169501.284:3506): pid=31502 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796278687A6E616D796A756E67786B6D68677A63767369756F6E656F696F6E6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169501.285:3507): pid=31502 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169501.287:3508): pid=31502 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169501.470:3509): pid=31502 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169501.470:3510): pid=31502 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169501.473:3511): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169501.473:3512): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169501.691:3513): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169501.691:3514): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169501.745:3515): pid=31525 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169501.745:3516): pid=31525 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63746E726C65686A747477726A65707A66727369766A736772656E76706A6E74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169501.746:3517): pid=31525 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169501.749:3518): pid=31525 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169505.934:3519): pid=31525 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169505.934:3520): pid=31525 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169505.938:3521): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169505.938:3522): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169506.068:3523): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169506.068:3524): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169506.128:3525): pid=31543 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169506.128:3526): pid=31543 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F73706B6B787072696873696F776A6F616A7779746E687A6F787271686E6277203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169506.129:3527): pid=31543 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169506.132:3528): pid=31543 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169510.414:3529): pid=31543 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169510.415:3530): pid=31543 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169510.419:3531): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169510.419:3532): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169510.591:3533): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169510.591:3534): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169510.654:3535): pid=31560 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169510.655:3536): pid=31560 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686B6166776D6978786F676E7A6B6F7A7975747568707476616372766C616177203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169510.656:3537): pid=31560 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169510.659:3538): pid=31560 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169510.846:3539): pid=31560 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169510.846:3540): pid=31560 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169510.849:3541): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169510.850:3542): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169511.060:3543): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169511.060:3544): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169511.127:3545): pid=31583 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169511.128:3546): pid=31583 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666671666B7966706377667073726E6C6E79766B767866636D6269617469647A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169511.128:3547): pid=31583 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169511.132:3548): pid=31583 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169515.406:3549): pid=31583 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169515.407:3550): pid=31583 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169515.411:3551): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169515.411:3552): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169515.548:3553): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169515.549:3554): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169515.619:3555): pid=31600 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169515.619:3556): pid=31600 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777364766764636366736765787178696B637861696561636262796F7072696E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169515.620:3557): pid=31600 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169515.622:3558): pid=31600 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169519.885:3559): pid=31600 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169519.886:3560): pid=31600 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169519.890:3561): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169519.890:3562): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169539.821:3563): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169539.821:3564): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169539.879:3565): pid=31617 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169539.879:3566): pid=31617 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717469677174796D746D6A68646E6769706B787A7170666A63747979667A6579203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169539.880:3567): pid=31617 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169539.882:3568): pid=31617 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169540.035:3569): pid=31617 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169540.036:3570): pid=31617 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169540.040:3571): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169540.040:3572): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169540.141:3573): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169540.141:3574): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169540.171:3575): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169540.171:3576): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169540.213:3577): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169540.213:3578): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169540.250:3579): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169540.250:3580): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169540.291:3581): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169540.291:3582): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169540.380:3583): pid=31665 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169540.381:3584): pid=31665 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D64727067746E74637A7477747074666269717A7877706677646874796F6A62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169540.381:3585): pid=31665 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169540.384:3586): pid=31665 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169540.558:3587): pid=31665 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169540.558:3588): pid=31665 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169540.561:3589): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169540.561:3590): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169540.601:3591): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169540.601:3592): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169540.658:3593): pid=31683 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169540.658:3594): pid=31683 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676671746D6F64676367727772726564706C796269757469647A67686C756465203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169540.659:3595): pid=31683 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169540.661:3596): pid=31683 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169540.861:3597): pid=31683 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169540.861:3598): pid=31683 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169540.864:3599): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169540.864:3600): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169540.906:3601): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169540.906:3602): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169540.930:3603): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169540.930:3604): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169541.031:3605): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169541.031:3606): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169541.089:3607): pid=31713 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169541.089:3608): pid=31713 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646866636C6E74666C737874766B787763716F66697A61716C6A787A64677771203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169541.089:3609): pid=31713 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169541.092:3610): pid=31713 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169541.275:3611): pid=31713 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169541.276:3612): pid=31713 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169541.280:3613): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169541.280:3614): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169541.442:3615): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169541.442:3616): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169541.474:3617): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169541.474:3618): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169541.515:3619): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169541.515:3620): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169541.550:3621): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169541.550:3622): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169541.592:3623): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169541.592:3624): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169541.652:3625): pid=31761 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169541.653:3626): pid=31761 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71636B6574726C6773726868686C77787078646E777778616F726C6279767264203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169541.653:3627): pid=31761 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169541.655:3628): pid=31761 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169541.830:3629): pid=31761 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169541.830:3630): pid=31761 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169541.833:3631): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169541.834:3632): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169541.875:3633): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169541.875:3634): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169541.926:3635): pid=31779 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169541.926:3636): pid=31779 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7472716C6863716778756A766E796F6A7668787A706F6F726C69617075777977203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169541.926:3637): pid=31779 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169541.928:3638): pid=31779 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169542.095:3639): pid=31779 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169542.095:3640): pid=31779 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169542.099:3641): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169542.099:3642): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169542.140:3643): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169542.140:3644): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169542.167:3645): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169542.167:3646): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169542.300:3647): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169542.300:3648): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169542.334:3649): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169542.334:3650): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169542.376:3651): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169542.376:3652): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169542.408:3653): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169542.408:3654): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169542.487:3655): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169542.487:3656): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169542.544:3657): pid=31841 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169542.544:3658): pid=31841 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71646D7161766C6E636565727A6C776C74796E757564707A77666C7875616C6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169542.545:3659): pid=31841 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169542.546:3660): pid=31841 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169542.720:3661): pid=31841 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169542.721:3662): pid=31841 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169542.724:3663): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169542.724:3664): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169542.755:3665): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169542.755:3666): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169542.815:3667): pid=31859 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169542.815:3668): pid=31859 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616E6C686672737A786570647A6B717872726C737A6367736B756E736D686A73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169542.815:3669): pid=31859 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169542.817:3670): pid=31859 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169542.999:3671): pid=31859 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169543.000:3672): pid=31859 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169543.004:3673): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169543.004:3674): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169543.046:3675): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169543.046:3676): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169543.077:3677): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169543.077:3678): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169543.144:3679): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169543.144:3680): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169543.175:3681): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169543.175:3682): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169543.216:3683): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169543.217:3684): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169543.252:3685): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169543.252:3686): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169543.376:3687): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169543.376:3688): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169543.438:3689): pid=31921 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169543.439:3690): pid=31921 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6C666D766D6C637A62617779736A757368646C76716E677176706679716D63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169543.440:3691): pid=31921 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169543.442:3692): pid=31921 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169543.633:3693): pid=31921 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169543.633:3694): pid=31921 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169543.637:3695): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169543.637:3696): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169543.678:3697): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169543.679:3698): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169543.738:3699): pid=31939 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169543.738:3700): pid=31939 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6D7268767178656674727A696D657577676876736268617971757179737A76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169543.739:3701): pid=31939 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169543.742:3702): pid=31939 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169543.920:3703): pid=31939 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169543.920:3704): pid=31939 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169543.924:3705): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169543.924:3706): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169543.948:3707): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169543.948:3708): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169543.978:3709): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169543.978:3710): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169544.036:3711): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169544.036:3712): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169544.066:3713): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169544.067:3714): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169544.107:3715): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169544.108:3716): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169544.142:3717): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169544.142:3718): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169544.307:3719): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169544.307:3720): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169544.360:3721): pid=32001 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169544.360:3722): pid=32001 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796467626374797061786369646D7467746C6B7366786267676E6B61716A7276203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169544.362:3723): pid=32001 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169544.365:3724): pid=32001 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169544.552:3725): pid=32001 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169544.553:3726): pid=32001 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169544.556:3727): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169544.557:3728): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169544.597:3729): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169544.598:3730): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169544.658:3731): pid=32019 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169544.659:3732): pid=32019 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696B69656B6A71726D656573626165646F766A6775777063756A746B7A746972203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169544.659:3733): pid=32019 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169544.662:3734): pid=32019 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169544.838:3735): pid=32019 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169544.839:3736): pid=32019 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169544.842:3737): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169544.842:3738): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169544.883:3739): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169544.884:3740): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169544.915:3741): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169544.915:3742): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169544.961:3743): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169544.962:3744): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169544.992:3745): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169544.992:3746): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169545.033:3747): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169545.034:3748): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169545.070:3749): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169545.070:3750): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169545.114:3751): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169545.115:3752): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169545.162:3753): pid=32081 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169545.162:3754): pid=32081 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6561647176667272696B6378796E66756B6C6D75696E6271786567796C61696D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169545.162:3755): pid=32081 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169545.164:3756): pid=32081 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169545.329:3757): pid=32081 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169545.330:3758): pid=32081 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169545.334:3759): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169545.334:3760): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169545.375:3761): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169545.375:3762): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169545.430:3763): pid=32099 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169545.430:3764): pid=32099 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A70776A6B6F636479766B7973687165626A6E78696B7A7463706C716A7A7873203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169545.430:3765): pid=32099 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169545.432:3766): pid=32099 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169545.609:3767): pid=32099 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169545.610:3768): pid=32099 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169545.614:3769): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169545.614:3770): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169545.655:3771): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169545.655:3772): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169545.686:3773): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169545.686:3774): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169545.748:3775): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169545.748:3776): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169545.773:3777): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169545.773:3778): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169545.815:3779): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169545.815:3780): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169545.853:3781): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169545.853:3782): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169545.938:3783): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169545.938:3784): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169546.002:3785): pid=32161 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169546.003:3786): pid=32161 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71797472766969786C6B6F7674766D696375747877716774617A797A62666377203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169546.003:3787): pid=32161 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169546.005:3788): pid=32161 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169546.185:3789): pid=32161 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169546.185:3790): pid=32161 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169546.189:3791): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169546.190:3792): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169546.231:3793): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169546.231:3794): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169546.289:3795): pid=32179 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169546.289:3796): pid=32179 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C69616C696B67666571797666646864667A6C687172626C6479686D73627670203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169546.289:3797): pid=32179 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169546.292:3798): pid=32179 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169546.469:3799): pid=32179 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169546.469:3800): pid=32179 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169546.473:3801): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169546.473:3802): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169546.516:3803): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169546.516:3804): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169546.545:3805): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169546.546:3806): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169546.611:3807): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169546.611:3808): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169546.643:3809): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169546.643:3810): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169546.688:3811): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169546.688:3812): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169546.724:3813): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169546.724:3814): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169546.766:3815): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169546.766:3816): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169546.827:3817): pid=32241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169546.827:3818): pid=32241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717963636275756F70627477697861787568687A627373646C61707062707373203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169546.827:3819): pid=32241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169546.830:3820): pid=32241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169547.012:3821): pid=32241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169547.012:3822): pid=32241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169547.016:3823): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169547.016:3824): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169547.057:3825): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169547.058:3826): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169547.101:3827): pid=32259 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169547.101:3828): pid=32259 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786E62716D7574746F646A71667A6A726579756F61776D72666975786D79746D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169547.101:3829): pid=32259 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169547.103:3830): pid=32259 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169547.240:3831): pid=32259 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169547.240:3832): pid=32259 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169547.242:3833): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169547.243:3834): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169547.283:3835): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169547.284:3836): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169547.314:3837): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169547.314:3838): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169547.381:3839): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169547.382:3840): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169547.420:3841): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169547.420:3842): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169547.461:3843): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169547.462:3844): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169547.497:3845): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169547.497:3846): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169547.564:3847): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169547.564:3848): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169547.625:3849): pid=32321 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169547.626:3850): pid=32321 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666D646D717865796C7A68657A646B71706A63767477786C7369756A7474726C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169547.627:3851): pid=32321 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169547.629:3852): pid=32321 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169547.792:3853): pid=32321 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169547.793:3854): pid=32321 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169547.796:3855): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169547.796:3856): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169547.876:3857): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169547.877:3858): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169547.927:3859): pid=32339 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169547.927:3860): pid=32339 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776972726B6171696C66756C67786866736C73616D75736578716E7379686161203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169547.928:3861): pid=32339 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169547.930:3862): pid=32339 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169548.105:3863): pid=32339 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169548.105:3864): pid=32339 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169548.109:3865): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169548.109:3866): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169548.151:3867): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169548.151:3868): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169548.181:3869): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169548.181:3870): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169548.231:3871): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169548.231:3872): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169548.264:3873): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169548.264:3874): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169548.306:3875): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169548.306:3876): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169548.339:3877): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169548.340:3878): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169548.401:3879): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169548.401:3880): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169548.457:3881): pid=32401 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169548.458:3882): pid=32401 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76647A786E796B62696362777665656B6A6B61656974786273777A7864716A6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169548.459:3883): pid=32401 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169548.461:3884): pid=32401 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169548.645:3885): pid=32401 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169548.646:3886): pid=32401 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169548.650:3887): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169548.650:3888): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169548.677:3889): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169548.677:3890): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169548.730:3891): pid=32419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169548.730:3892): pid=32419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70696D7373616B6C666673676A646966716E6564666D6B756563766464776D63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169548.731:3893): pid=32419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169548.732:3894): pid=32419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169548.917:3895): pid=32419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169548.917:3896): pid=32419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169548.921:3897): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169548.921:3898): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169548.963:3899): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169548.963:3900): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169548.993:3901): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169548.993:3902): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169549.057:3903): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169549.057:3904): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169549.082:3905): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169549.082:3906): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169549.123:3907): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169549.124:3908): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169549.160:3909): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169549.160:3910): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169549.214:3911): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169549.214:3912): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169549.272:3913): pid=32481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169549.273:3914): pid=32481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647162656B68766A6969706A676172796C6C6277786B78706A6C736B647A6876203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169549.274:3915): pid=32481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169549.276:3916): pid=32481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169549.447:3917): pid=32481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169549.448:3918): pid=32481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169549.453:3919): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169549.453:3920): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169549.494:3921): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169549.495:3922): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169549.554:3923): pid=32499 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169549.555:3924): pid=32499 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636A78746765767761756165797A6567756D6D6C65626C686B63747374657A74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169549.555:3925): pid=32499 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169549.558:3926): pid=32499 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169549.721:3927): pid=32499 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169549.722:3928): pid=32499 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169549.725:3929): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169549.725:3930): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169549.767:3931): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169549.767:3932): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169549.799:3933): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169549.799:3934): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169549.860:3935): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169549.860:3936): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169549.889:3937): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169549.890:3938): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169549.931:3939): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169549.931:3940): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169549.965:3941): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169549.966:3942): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169550.032:3943): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169550.032:3944): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169550.087:3945): pid=32561 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169550.087:3946): pid=32561 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C707672627364756762686474676B687A6B767962666B796378646D73707471203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169550.088:3947): pid=32561 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169550.090:3948): pid=32561 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169550.275:3949): pid=32561 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169550.275:3950): pid=32561 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169550.278:3951): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169550.279:3952): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169550.319:3953): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169550.320:3954): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169550.367:3955): pid=32579 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169550.368:3956): pid=32579 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7468697475726C666875747A71796A646E696E61616F77656D78706973697771203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169550.368:3957): pid=32579 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169550.370:3958): pid=32579 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169550.554:3959): pid=32579 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169550.554:3960): pid=32579 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169550.559:3961): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169550.559:3962): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169550.600:3963): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169550.600:3964): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169550.628:3965): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169550.629:3966): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169550.829:3967): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169550.829:3968): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169550.883:3969): pid=32609 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169550.883:3970): pid=32609 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706F6B75676A656362726377616B76686A736E6777676872687964667A6B6D6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169550.884:3971): pid=32609 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169550.886:3972): pid=32609 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169551.051:3973): pid=32609 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169551.051:3974): pid=32609 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169551.055:3975): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169551.055:3976): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169551.350:3977): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169551.350:3978): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169551.380:3979): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169551.380:3980): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169551.421:3981): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169551.421:3982): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169551.457:3983): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169551.457:3984): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169551.499:3985): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169551.499:3986): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169551.558:3987): pid=32657 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169551.558:3988): pid=32657 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C616B6D6F7A686677776A736B6B6C736A6D796E797965696A6C68636267706E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169551.559:3989): pid=32657 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169551.561:3990): pid=32657 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169551.739:3991): pid=32657 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169551.739:3992): pid=32657 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169551.743:3993): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169551.743:3994): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169551.781:3995): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169551.781:3996): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169551.841:3997): pid=32675 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169551.841:3998): pid=32675 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636373616D746F7973686A7A6D7372717876726E736573776E69667A7A666B6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169551.842:3999): pid=32675 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169551.843:4000): pid=32675 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169552.018:4001): pid=32675 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169552.019:4002): pid=32675 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169552.022:4003): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169552.022:4004): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169552.052:4005): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169552.052:4006): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169552.081:4007): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169552.081:4008): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169554.953:4009): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169554.953:4010): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169555.016:4011): pid=32705 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169555.017:4012): pid=32705 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666A736172786A62676F77747065756F71736C6E6C786A767268617667686F68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169555.017:4013): pid=32705 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169555.022:4014): pid=32705 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169557.780:4015): pid=32705 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169557.781:4016): pid=32705 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169557.785:4017): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169557.785:4018): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169559.271:4019): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169559.271:4020): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169559.332:4021): pid=32722 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169559.332:4022): pid=32722 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A65657775717364756A6B65627768716D717A666263696D70647171736A69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169559.333:4023): pid=32722 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169559.337:4024): pid=32722 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169560.670:4025): pid=32722 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169560.670:4026): pid=32722 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169560.674:4027): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169560.674:4028): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169560.730:4029): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169560.730:4030): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169560.787:4031): pid=32740 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169560.788:4032): pid=32740 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66706F746F726E74756C76656A626F627A79726D777478757178756661716975203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169560.788:4033): pid=32740 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169560.791:4034): pid=32740 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169562.103:4035): pid=32740 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169562.104:4036): pid=32740 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169562.108:4037): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169562.108:4038): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169562.235:4039): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169562.235:4040): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169562.295:4041): pid=32758 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169562.296:4042): pid=32758 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696E626A6D716D6B726A6E716C64676C7A7961766F6975687179657269757871203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169562.296:4043): pid=32758 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169562.299:4044): pid=32758 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1760169562.834:4045): prog-id=142 op=LOAD
type=BPF msg=audit(1760169562.834:4046): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169562.837:4047): prog-id=143 op=LOAD
type=BPF msg=audit(1760169562.837:4048): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169562.837:4049): prog-id=144 op=LOAD
type=BPF msg=audit(1760169562.838:4050): prog-id=145 op=LOAD
type=BPF msg=audit(1760169562.838:4051): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169562.838:4052): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169562.839:4053): prog-id=146 op=LOAD
type=BPF msg=audit(1760169562.839:4054): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169562.839:4055): prog-id=147 op=LOAD
type=BPF msg=audit(1760169562.839:4056): prog-id=148 op=LOAD
type=BPF msg=audit(1760169562.839:4057): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169562.839:4058): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169562.839:4059): prog-id=149 op=LOAD
type=BPF msg=audit(1760169562.839:4060): prog-id=150 op=LOAD
type=BPF msg=audit(1760169562.839:4061): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169562.839:4062): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169562.840:4063): prog-id=151 op=LOAD
type=BPF msg=audit(1760169562.840:4064): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1760169562.929:4065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=nftables comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760169562.959:4066): pid=32758 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169562.959:4067): pid=32758 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169562.965:4068): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169562.965:4069): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169563.261:4070): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169563.261:4071): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169563.293:4072): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169563.293:4073): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169563.334:4074): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169563.335:4075): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169563.372:4076): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169563.372:4077): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169563.413:4078): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169563.413:4079): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169563.477:4080): pid=32848 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169563.477:4081): pid=32848 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6774756F736569776F696C6E76756A736F777467696B637165746B6967776176203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169563.478:4082): pid=32848 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169563.482:4083): pid=32848 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169563.641:4084): pid=32848 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169563.641:4085): pid=32848 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169563.644:4086): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169563.644:4087): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169563.685:4088): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169563.685:4089): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169563.724:4090): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169563.724:4091): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169563.764:4092): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169563.764:4093): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169563.794:4094): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169563.794:4095): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169563.835:4096): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169563.835:4097): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169563.894:4098): pid=32891 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169563.894:4099): pid=32891 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78687A66667665716F7663736E646C6373667971686D7775776D757469646D77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169563.895:4100): pid=32891 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169563.898:4101): pid=32891 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169564.071:4102): pid=32891 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169564.072:4103): pid=32891 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169564.076:4104): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169564.076:4105): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169564.117:4106): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169564.118:4107): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169564.144:4108): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169564.144:4109): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169564.235:4110): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169564.235:4111): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169564.287:4112): pid=32921 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169564.288:4113): pid=32921 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796975766A71776F6D6F64747263757A6D616176767279687573746168617273203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169564.288:4114): pid=32921 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169564.290:4115): pid=32921 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=NETFILTER_CFG msg=audit(1760169564.458:4116): table=filter:2 family=10 entries=4 op=nft_register_chain pid=32924 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1760169564.458:4116): table=raw:2 family=10 entries=3 op=nft_register_chain pid=32924 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1760169564.458:4116): table=nat:2 family=2 entries=5 op=nft_register_chain pid=32924 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1760169564.458:4116): table=raw:2 family=2 entries=3 op=nft_register_chain pid=32924 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1760169564.458:4116): table=filter:2 family=2 entries=4 op=nft_register_chain pid=32924 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1760169564.458:4116): table=nat:2 family=1 entries=5 op=nft_register_chain pid=32924 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1760169564.458:4116): table=raw:2 family=1 entries=3 op=nft_register_chain pid=32924 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1760169564.458:4116): table=filter:2 family=1 entries=4 op=nft_register_chain pid=32924 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=SYSCALL msg=audit(1760169564.458:4116): arch=c000003e syscall=46 success=yes exit=2212 a0=3 a1=7ffe494035c0 a2=0 a3=7fe41720abc4 items=0 ppid=32923 pid=32924 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169564.458:4116): proctitle=6E6674002D66002F6574632F6E667461626C65732F69707461626C65732E6E6674
type=USER_END msg=audit(1760169564.494:4117): pid=32921 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169564.494:4118): pid=32921 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169564.498:4119): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169564.498:4120): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169564.736:4121): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169564.736:4122): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169564.792:4123): pid=32939 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169564.793:4124): pid=32939 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626E747A716B76676E696C7A6463666364636B6466786661687777616973666A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169564.793:4125): pid=32939 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169564.796:4126): pid=32939 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169564.978:4127): pid=32939 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169564.978:4128): pid=32939 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169564.981:4129): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169564.981:4130): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169565.065:4131): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169565.066:4132): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169565.089:4133): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169565.089:4134): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169565.130:4135): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169565.130:4136): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169565.158:4137): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169565.158:4138): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169565.261:4139): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169565.261:4140): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169565.318:4141): pid=32988 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169565.318:4142): pid=32988 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B727173627075746A6B76756B75696778636F7478646B787968767977726676203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169565.319:4143): pid=32988 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169565.321:4144): pid=32988 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169565.484:4145): pid=32988 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169565.485:4146): pid=32988 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169565.488:4147): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169565.488:4148): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169565.529:4149): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169565.529:4150): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169565.550:4151): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169565.550:4152): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169565.591:4153): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169565.592:4154): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169565.615:4155): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169565.615:4156): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169565.658:4157): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169565.658:4158): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169565.715:4159): pid=33031 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169565.715:4160): pid=33031 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6877716E6672736366636777676F6E6369736365686279676A79767A707A7077203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169565.717:4161): pid=33031 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169565.720:4162): pid=33031 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169565.893:4163): pid=33031 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169565.893:4164): pid=33031 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169565.896:4165): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169565.896:4166): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169565.938:4167): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169565.938:4168): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169565.963:4169): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169565.963:4170): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169566.063:4171): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169566.063:4172): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169566.089:4173): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169566.089:4174): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169566.130:4175): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169566.131:4176): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169566.160:4177): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169566.160:4178): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169566.297:4179): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169566.297:4180): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169566.348:4181): pid=33093 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169566.349:4182): pid=33093 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6F6F6F796D6A6C77686563706371616E70736F7A746B6766686D6F6B746576203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169566.349:4183): pid=33093 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169566.351:4184): pid=33093 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169566.533:4185): pid=33093 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169566.534:4186): pid=33093 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169566.537:4187): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169566.538:4188): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169566.578:4189): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169566.579:4190): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169566.612:4191): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169566.612:4192): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169566.653:4193): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169566.653:4194): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169566.680:4195): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169566.680:4196): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169566.720:4197): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169566.720:4198): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169566.775:4199): pid=33136 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169566.775:4200): pid=33136 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79626D6D64706A746467626670736A676A756F7A63706A6872726766756A686A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169566.775:4201): pid=33136 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169566.777:4202): pid=33136 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169566.952:4203): pid=33136 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169566.952:4204): pid=33136 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169566.955:4205): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169566.955:4206): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169566.996:4207): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169566.997:4208): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169567.020:4209): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169567.020:4210): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169567.158:4211): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169567.158:4212): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169567.186:4213): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169567.187:4214): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169567.227:4215): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169567.228:4216): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169567.258:4217): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169567.258:4218): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169567.307:4219): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169567.307:4220): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169567.364:4221): pid=33198 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169567.364:4222): pid=33198 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66706B6962656E6E707970766C69766A6675716367777575616C7861746E6B66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169567.365:4223): pid=33198 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169567.368:4224): pid=33198 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169567.539:4225): pid=33198 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169567.539:4226): pid=33198 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169567.543:4227): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169567.543:4228): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169567.579:4229): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169567.579:4230): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169567.613:4231): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169567.614:4232): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169567.654:4233): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169567.654:4234): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169567.684:4235): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169567.684:4236): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169567.725:4237): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169567.726:4238): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169567.775:4239): pid=33241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169567.776:4240): pid=33241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776262687568646C6A6F626D706A796D6D6E6B656F6A6E627565616A6978756A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169567.776:4241): pid=33241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169567.779:4242): pid=33241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169567.927:4243): pid=33241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169567.927:4244): pid=33241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169567.931:4245): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169567.931:4246): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169567.977:4247): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169567.977:4248): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169568.005:4249): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169568.005:4250): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169568.096:4251): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169568.096:4252): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169568.125:4253): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169568.125:4254): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169568.166:4255): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169568.166:4256): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169568.201:4257): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169568.201:4258): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169568.257:4259): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169568.257:4260): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169568.317:4261): pid=33303 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169568.318:4262): pid=33303 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716E7163677169716962706B74726E6F6D666A6A717467686568667662677762203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169568.318:4263): pid=33303 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169568.321:4264): pid=33303 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169568.467:4265): pid=33303 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169568.467:4266): pid=33303 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169568.470:4267): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169568.470:4268): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169568.512:4269): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169568.512:4270): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169568.551:4271): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169568.551:4272): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169568.593:4273): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169568.594:4274): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169568.624:4275): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169568.624:4276): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169568.664:4277): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169568.665:4278): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169568.714:4279): pid=33346 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169568.714:4280): pid=33346 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75796D67626F7363637271667A7169796F617279647879696265726870626F6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169568.716:4281): pid=33346 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169568.719:4282): pid=33346 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169568.890:4283): pid=33346 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169568.890:4284): pid=33346 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169568.894:4285): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169568.894:4286): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169568.935:4287): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169568.936:4288): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169568.969:4289): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169568.969:4290): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169569.056:4291): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169569.056:4292): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169569.089:4293): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169569.090:4294): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169569.130:4295): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169569.131:4296): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169569.168:4297): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169569.168:4298): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169569.642:4299): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169569.642:4300): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169569.708:4301): pid=33408 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169569.708:4302): pid=33408 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6D6D706275787264777075756A7A6C706468796C6A6269706C736274777971203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169569.709:4303): pid=33408 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169569.712:4304): pid=33408 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169569.874:4305): pid=33408 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169569.874:4306): pid=33408 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169569.879:4307): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169569.879:4308): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169569.920:4309): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169569.921:4310): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169569.969:4311): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169569.969:4312): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169570.011:4313): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169570.011:4314): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169570.039:4315): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169570.040:4316): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169570.081:4317): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169570.081:4318): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169570.144:4319): pid=33451 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169570.144:4320): pid=33451 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6271636E7A6D696477767364736F7378687374787769616E63726F66726E62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169570.145:4321): pid=33451 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169570.147:4322): pid=33451 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169570.336:4323): pid=33451 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169570.336:4324): pid=33451 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169570.340:4325): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169570.340:4326): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169570.381:4327): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169570.382:4328): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169570.419:4329): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169570.419:4330): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169570.571:4331): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169570.571:4332): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169570.641:4333): pid=33481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169570.642:4334): pid=33481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7864636868646C616E68706469716A62726F7276786D67696579707A6E72766D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169570.643:4335): pid=33481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169570.647:4336): pid=33481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169571.120:4337): pid=33481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169571.120:4338): pid=33481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169571.125:4339): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169571.125:4340): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169571.242:4341): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169571.242:4342): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169571.303:4343): pid=33546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169571.304:4344): pid=33546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67756F6B65776E69636C666363786676796372787A7A6B726C726E776C7A786B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169571.304:4345): pid=33546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169571.307:4346): pid=33546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169571.514:4347): pid=33546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169571.514:4348): pid=33546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169571.519:4349): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169571.519:4350): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169571.725:4351): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169571.725:4352): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169571.787:4353): pid=33563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169571.787:4354): pid=33563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64726C6C7A6B7A6C6D6266616D7278647A79756769787A7462786E7273706E74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169571.788:4355): pid=33563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169571.790:4356): pid=33563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=NETFILTER_CFG msg=audit(1760169571.957:4357): table=raw:3 family=1 entries=2 op=nft_register_chain pid=33566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1760169571.957:4357): table=filter:3 family=1 entries=1 op=nft_register_chain pid=33566 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=SYSCALL msg=audit(1760169571.957:4357): arch=c000003e syscall=46 success=yes exit=192 a0=3 a1=7ffe75e40aa0 a2=0 a3=7fb3fea56bc4 items=0 ppid=33565 pid=33566 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169571.957:4357): proctitle=6E6674002D66002F6574632F6E667461626C65732F747269706C656F2D636861696E732E6E6674
type=USER_END msg=audit(1760169571.968:4358): pid=33563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169571.968:4359): pid=33563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169571.971:4360): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169571.971:4361): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169572.097:4362): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169572.097:4363): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169572.152:4364): pid=33580 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169572.153:4365): pid=33580 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B726B6C7775787A706E716469746E6F79627A63627865686B746775717A7363203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169572.153:4366): pid=33580 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169572.156:4367): pid=33580 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=NETFILTER_CFG msg=audit(1760169572.297:4368): table=raw:4 family=1 entries=4 op=nft_register_rule pid=33585 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1760169572.297:4368): table=filter:4 family=1 entries=30 op=nft_register_chain pid=33585 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=SYSCALL msg=audit(1760169572.297:4368): arch=c000003e syscall=46 success=yes exit=9864 a0=3 a1=7ffc9fded8c0 a2=0 a3=7f2ce250bbc4 items=0 ppid=33583 pid=33585 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169572.297:4368): proctitle=6E6674002D66002D
type=USER_END msg=audit(1760169572.313:4369): pid=33580 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169572.313:4370): pid=33580 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169572.317:4371): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169572.317:4372): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169572.487:4373): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169572.487:4374): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169572.547:4375): pid=33599 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169572.547:4376): pid=33599 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74666A6F71756765726878666E6A6D6275786A7A75746C6A6A6A627879707561203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169572.548:4377): pid=33599 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169572.550:4378): pid=33599 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169572.742:4379): pid=33599 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169572.742:4380): pid=33599 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169572.746:4381): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169572.746:4382): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169572.801:4383): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169572.801:4384): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169572.859:4385): pid=33615 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169572.860:4386): pid=33615 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A747A7A73747071617862636A65716272737064647179766469686369676C72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169572.860:4387): pid=33615 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169572.862:4388): pid=33615 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169573.045:4389): pid=33615 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169573.045:4390): pid=33615 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169573.051:4391): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169573.052:4392): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169573.247:4393): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169573.247:4394): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169573.308:4395): pid=33631 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169573.308:4396): pid=33631 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E79626D6D6A6C677474776B7775656969646A7A7A7262697A637663796E6469203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169573.309:4397): pid=33631 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169573.311:4398): pid=33631 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169573.506:4399): pid=33631 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169573.506:4400): pid=33631 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169573.510:4401): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169573.510:4402): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169573.626:4403): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169573.626:4404): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169573.688:4405): pid=33647 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169573.688:4406): pid=33647 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7963766266666C63657A6171647178686B7A62716A69666970646C6B6F627468203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169573.689:4407): pid=33647 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169573.692:4408): pid=33647 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169574.042:4409): bool=virt_sandbox_use_netlink val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=SYSCALL msg=audit(1760169574.042:4409): arch=c000003e syscall=1 success=yes exit=2 a0=5 a1=7ffc28ed30ae a2=2 a3=0 items=0 ppid=33647 pid=33649 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="python3" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169574.042:4409): proctitle="/usr/bin/python3"
type=USER_END msg=audit(1760169574.593:4410): pid=33647 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169574.593:4411): pid=33647 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169574.598:4412): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169574.598:4413): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169574.704:4414): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169574.704:4415): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169574.759:4416): pid=33667 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169574.759:4417): pid=33667 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72616D71666E726B646769756D6B73706570686E727971786F6976626665726D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169574.760:4418): pid=33667 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169574.765:4419): pid=33667 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_POLICY_LOAD msg=audit(1760169575.733:4420): auid=1002 ses=14 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1760169575.733:4420): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7fd0c2600000 a2=36aa51 a3=0 items=0 ppid=33669 pid=33674 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169575.733:4420): proctitle="/sbin/load_policy"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169575.911:4421): pid=33669 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/etc/iscsi(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1760169575.939:4422): pid=33667 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169575.939:4423): pid=33667 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169575.942:4424): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169575.942:4425): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169576.002:4426): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169576.002:4427): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169576.065:4428): pid=33688 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169576.066:4429): pid=33688 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6A63706B7367676C6579667A7163776A78796A73777A65617A6E7774787272203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169576.067:4430): pid=33688 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169576.073:4431): pid=33688 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_POLICY_LOAD msg=audit(1760169576.998:4432): auid=1002 ses=14 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1760169576.998:4432): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7fa6f5c00000 a2=36aa51 a3=0 items=0 ppid=33690 pid=33695 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169576.998:4432): proctitle="/sbin/load_policy"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169577.173:4433): pid=33690 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=modify tglob="/etc/target(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1760169577.211:4434): pid=33688 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169577.212:4435): pid=33688 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169577.217:4436): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169577.217:4437): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169577.262:4438): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169577.262:4439): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169577.325:4440): pid=33709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169577.326:4441): pid=33709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76766A696B68616A79636E6C777670796D79726F666D75756B6F66666C6D6667203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169577.327:4442): pid=33709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169577.333:4443): pid=33709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_POLICY_LOAD msg=audit(1760169578.226:4444): auid=1002 ses=14 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1760169578.226:4444): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7fcb29200000 a2=36aa51 a3=0 items=0 ppid=33711 pid=33717 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169578.226:4444): proctitle="/sbin/load_policy"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169578.400:4445): pid=33711 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=modify tglob="/var/lib/iscsi(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1760169578.445:4446): pid=33709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169578.445:4447): pid=33709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169578.450:4448): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169578.450:4449): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169578.566:4450): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169578.566:4451): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169578.625:4452): pid=33731 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169578.625:4453): pid=33731 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6B6C6C616F69796F706C787363696A6F6669687162696A73776B6E7A746A78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169578.626:4454): pid=33731 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169578.631:4455): pid=33731 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169578.811:4456): pid=33731 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169578.811:4457): pid=33731 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169578.815:4458): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169578.815:4459): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169578.873:4460): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169578.873:4461): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169578.935:4462): pid=33747 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169578.935:4463): pid=33747 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7271766A74786363686969726B6A6C72726678786D7674766C6B6A7866616466203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169578.936:4464): pid=33747 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169578.939:4465): pid=33747 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169579.116:4466): pid=33747 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169579.116:4467): pid=33747 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169579.119:4468): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169579.119:4469): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169579.171:4470): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169579.171:4471): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169579.225:4472): pid=33763 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169579.225:4473): pid=33763 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696167676C73716A6B7064776D6C7A636E71646576756C717075687A786D6876203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169579.226:4474): pid=33763 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169579.227:4475): pid=33763 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169579.400:4476): pid=33763 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169579.400:4477): pid=33763 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169579.404:4478): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169579.404:4479): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169579.499:4480): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169579.499:4481): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169579.560:4482): pid=33779 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169579.561:4483): pid=33779 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6275747467766F7379766D736D666C697971756875746A786167766D62716E73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169579.561:4484): pid=33779 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169579.564:4485): pid=33779 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169579.729:4486): pid=33779 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169579.729:4487): pid=33779 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169579.733:4488): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169579.733:4489): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169579.855:4490): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169579.855:4491): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169579.907:4492): pid=33795 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169579.907:4493): pid=33795 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616B7763626B7A7071687366736B626B626C6C6E796B6B62716D69726E776E64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169579.908:4494): pid=33795 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169579.910:4495): pid=33795 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169580.099:4496): pid=33795 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169580.099:4497): pid=33795 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169580.101:4498): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169580.102:4499): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169580.350:4500): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169580.350:4501): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169580.401:4502): pid=33812 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169580.401:4503): pid=33812 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70776B7370666773626C6266687561756D6F6C6D716D6B7763756A6E6376636D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169580.402:4504): pid=33812 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169580.403:4505): pid=33812 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169583.158:4506): pid=33814 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="dracut-config-generic-057-21.git20230214.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1760169583.930:4507): pid=33812 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169583.931:4508): pid=33812 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169583.936:4509): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169583.936:4510): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169584.036:4511): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169584.036:4512): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169584.098:4513): pid=33829 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169584.098:4514): pid=33829 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68726C726F6F6C756B757A776F7A62737869726A79726F657663657973727474203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169584.099:4515): pid=33829 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169584.101:4516): pid=33829 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169584.281:4517): pid=33829 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169584.282:4518): pid=33829 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169584.286:4519): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169584.286:4520): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169584.386:4521): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169584.386:4522): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169584.417:4523): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169584.417:4524): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169584.459:4525): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169584.459:4526): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169584.488:4527): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169584.488:4528): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169584.540:4529): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169584.540:4530): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169584.598:4531): pid=33877 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169584.598:4532): pid=33877 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7365636168706A717177717570706861647A78767A6C697577746676636A666A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169584.599:4533): pid=33877 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169584.601:4534): pid=33877 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169584.762:4535): pid=33877 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169584.763:4536): pid=33877 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169584.766:4537): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169584.766:4538): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169584.808:4539): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169584.808:4540): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169584.833:4541): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169584.833:4542): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169584.873:4543): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169584.873:4544): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169584.903:4545): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169584.903:4546): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169584.944:4547): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169584.945:4548): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169585.004:4549): pid=33920 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169585.004:4550): pid=33920 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677763796765676F636561667571797567627A79746F726A6A65717A7667686A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169585.005:4551): pid=33920 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169585.007:4552): pid=33920 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169585.175:4553): pid=33920 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169585.175:4554): pid=33920 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169585.179:4555): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169585.179:4556): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169585.221:4557): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169585.221:4558): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169585.250:4559): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169585.250:4560): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169585.404:4561): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169585.405:4562): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169585.461:4563): pid=33950 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169585.461:4564): pid=33950 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7973697574796C616A7373646468636B626B6E7A7673786D6767716477686373203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169585.462:4565): pid=33950 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169585.465:4566): pid=33950 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1760169585.761:4567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760169585.849:4568): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760169585.879:4569): pid=33950 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169585.879:4570): pid=33950 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169585.883:4571): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169585.883:4572): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169585.980:4573): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169585.980:4574): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169586.011:4575): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169586.011:4576): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169586.053:4577): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169586.053:4578): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169586.092:4579): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169586.092:4580): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169586.147:4581): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169586.147:4582): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169586.211:4583): pid=34004 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169586.211:4584): pid=34004 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6376796E6A7A70786E68776966766B63706E68646C7A716F7A6E626E71687A66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169586.212:4585): pid=34004 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169586.215:4586): pid=34004 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169586.391:4587): pid=34004 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169586.391:4588): pid=34004 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169586.396:4589): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169586.396:4590): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169586.437:4591): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169586.437:4592): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169586.477:4593): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169586.477:4594): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169586.518:4595): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169586.519:4596): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169586.550:4597): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169586.550:4598): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169586.591:4599): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169586.592:4600): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169586.649:4601): pid=34047 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169586.650:4602): pid=34047 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67646C70717976636C637872626C7166716D79636D717169667A686D64757261203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169586.650:4603): pid=34047 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169586.653:4604): pid=34047 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169586.840:4605): pid=34047 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169586.840:4606): pid=34047 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169586.844:4607): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169586.844:4608): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169586.885:4609): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169586.886:4610): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169586.916:4611): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169586.917:4612): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169587.078:4613): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169587.079:4614): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169587.136:4615): pid=34077 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169587.137:4616): pid=34077 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7571636C6C687A716F78676F7778776863747A68686370797A736665716A6D78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169587.137:4617): pid=34077 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169587.140:4618): pid=34077 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169587.324:4619): pid=34077 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169587.324:4620): pid=34077 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169587.327:4621): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169587.328:4622): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169587.413:4623): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169587.413:4624): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169587.466:4625): pid=34095 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169587.466:4626): pid=34095 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6B616169616A746D6C77796562747565626E696C736B64626F737578746F70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169587.466:4627): pid=34095 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169587.468:4628): pid=34095 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169587.643:4629): pid=34095 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169587.643:4630): pid=34095 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169587.648:4631): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169587.648:4632): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169587.716:4633): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169587.716:4634): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169587.775:4635): pid=34113 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169587.775:4636): pid=34113 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676274676D71767A6B746A6A717A75717A76636F6C77716D6176696D61657166203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169587.776:4637): pid=34113 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169587.779:4638): pid=34113 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169587.948:4639): pid=34113 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169587.948:4640): pid=34113 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169587.952:4641): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169587.952:4642): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169588.035:4643): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169588.035:4644): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169588.089:4645): pid=34131 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169588.089:4646): pid=34131 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A656B7866676C6E7775756F63627A79636B686E70696175746D7063736C6378203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169588.090:4647): pid=34131 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169588.093:4648): pid=34131 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169588.275:4649): pid=34131 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169588.276:4650): pid=34131 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169588.293:4651): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169588.293:4652): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169588.374:4653): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169588.374:4654): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169588.433:4655): pid=34148 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169588.434:4656): pid=34148 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72626A78646D79696178656A6877697A7772627A797374617A616A6D72686774203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169588.434:4657): pid=34148 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169588.436:4658): pid=34148 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169588.591:4659): pid=34148 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169588.591:4660): pid=34148 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169588.595:4661): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169588.595:4662): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169588.685:4663): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169588.685:4664): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169588.740:4665): pid=34165 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169588.740:4666): pid=34165 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A65616E65766B6963717A7063667461756F6178787A7A706A6F696F6261686A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169588.741:4667): pid=34165 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169588.743:4668): pid=34165 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169588.912:4669): pid=34165 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169588.912:4670): pid=34165 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169588.916:4671): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169588.916:4672): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169588.990:4673): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169588.990:4674): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169589.048:4675): pid=34182 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169589.049:4676): pid=34182 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7762627271666A676E6771626D6F6F656177626F6978656177776366716E626C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169589.049:4677): pid=34182 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169589.053:4678): pid=34182 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169589.228:4679): pid=34182 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169589.228:4680): pid=34182 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169589.232:4681): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169589.232:4682): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169589.315:4683): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169589.315:4684): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169589.371:4685): pid=34200 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169589.371:4686): pid=34200 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F77746A6D756B72746F67727174636E73616E63696D786862697064616A6D63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169589.372:4687): pid=34200 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169589.374:4688): pid=34200 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169589.547:4689): pid=34200 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169589.548:4690): pid=34200 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169589.551:4691): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169589.551:4692): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169589.649:4693): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169589.649:4694): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169589.711:4695): pid=34218 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169589.711:4696): pid=34218 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72746C6A6372746F7A617875766F6C777A6B72736B787A75746D6E7069666B65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169589.713:4697): pid=34218 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169589.716:4698): pid=34218 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169589.899:4699): pid=34218 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169589.899:4700): pid=34218 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169589.902:4701): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169589.902:4702): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169589.985:4703): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169589.986:4704): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169590.032:4705): pid=34236 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169590.033:4706): pid=34236 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656968767678617071717467767975776D69656C666A61796B727973676C767A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169590.033:4707): pid=34236 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169590.035:4708): pid=34236 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169590.202:4709): pid=34236 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169590.202:4710): pid=34236 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169590.206:4711): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169590.206:4712): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169590.289:4713): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169590.289:4714): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169590.348:4715): pid=34254 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169590.348:4716): pid=34254 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7571747461706775666572686A6D6467736D766D6170686A6C666D6D727978203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169590.349:4717): pid=34254 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169590.351:4718): pid=34254 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169590.531:4719): pid=34254 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169590.531:4720): pid=34254 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169590.535:4721): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169590.535:4722): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169590.621:4723): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169590.621:4724): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169590.665:4725): pid=34272 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169590.665:4726): pid=34272 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7069677267797066697266666C696B7A6F6E727266626A6266637066637A796D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169590.666:4727): pid=34272 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169590.668:4728): pid=34272 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169590.820:4729): pid=34272 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169590.820:4730): pid=34272 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169590.824:4731): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169590.824:4732): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169590.908:4733): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169590.908:4734): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169590.964:4735): pid=34290 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169590.964:4736): pid=34290 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66786167696E6866736571686973637468636D7070746571616C696462787469203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169590.965:4737): pid=34290 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169590.967:4738): pid=34290 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169591.145:4739): pid=34290 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169591.146:4740): pid=34290 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169591.149:4741): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169591.149:4742): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169591.230:4743): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169591.231:4744): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169591.284:4745): pid=34308 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169591.284:4746): pid=34308 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736D67696C686B7A72717A6565676C726D7968676E6370616F72697079747661203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169591.285:4747): pid=34308 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169591.288:4748): pid=34308 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169591.462:4749): pid=34308 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169591.462:4750): pid=34308 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169591.466:4751): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169591.466:4752): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169591.556:4753): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169591.556:4754): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169591.601:4755): pid=34325 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169591.601:4756): pid=34325 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707A747371687A6C616676716D7278637678786E7A626976686977676C727373203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169591.602:4757): pid=34325 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169591.603:4758): pid=34325 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169591.753:4759): pid=34325 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169591.754:4760): pid=34325 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169591.758:4761): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169591.758:4762): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169591.874:4763): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169591.874:4764): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169591.933:4765): pid=34342 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169591.933:4766): pid=34342 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7968696F727165637469647A6A76646E62636B6B62646F617178646E616C7061203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169591.934:4767): pid=34342 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169591.937:4768): pid=34342 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169592.113:4769): pid=34342 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169592.113:4770): pid=34342 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169592.118:4771): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169592.118:4772): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169592.202:4773): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169592.203:4774): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169592.268:4775): pid=34359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169592.269:4776): pid=34359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746C777874696174787165616F6C6C7A777165666C70666974716D6E6C636464203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169592.269:4777): pid=34359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169592.272:4778): pid=34359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169592.447:4779): pid=34359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169592.448:4780): pid=34359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169592.453:4781): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169592.453:4782): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169592.545:4783): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169592.545:4784): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169592.592:4785): pid=34376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169592.592:4786): pid=34376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7678697572666C70676D746476617563786B6D6C6675756E6E6569716D6D6276203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169592.593:4787): pid=34376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169592.596:4788): pid=34376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169592.753:4789): pid=34376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169592.753:4790): pid=34376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169592.757:4791): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169592.757:4792): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169592.870:4793): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169592.870:4794): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169592.921:4795): pid=34394 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169592.921:4796): pid=34394 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68617A70776166726A787575696679747970616F6D6F75736C66746A716F6975203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169592.922:4797): pid=34394 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169592.926:4798): pid=34394 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1760169593.229:4799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760169593.256:4800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760169593.283:4801): pid=34394 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169593.283:4802): pid=34394 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169593.287:4803): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169593.288:4804): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169593.435:4805): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169593.436:4806): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169593.500:4807): pid=34414 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169593.500:4808): pid=34414 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D797477616364706E61716279716772616D69646473787A68687179616F637777203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169593.501:4809): pid=34414 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169593.505:4810): pid=34414 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169593.696:4811): pid=34414 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169593.696:4812): pid=34414 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169593.700:4813): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169593.700:4814): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169593.776:4815): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169593.776:4816): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169593.836:4817): pid=34430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169593.837:4818): pid=34430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74736D626866697862756770626B6E6B75786772626B6F6C636F6B7167747677203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169593.837:4819): pid=34430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169593.840:4820): pid=34430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169593.985:4821): pid=34430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169593.985:4822): pid=34430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169593.989:4823): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169593.989:4824): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169594.143:4825): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169594.143:4826): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169594.196:4827): pid=34446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169594.197:4828): pid=34446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6976656C6366746C62687A7069786775706C716E7561646F6B73657A746B7264203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169594.197:4829): pid=34446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169594.200:4830): pid=34446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169594.351:4831): pid=34446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169594.351:4832): pid=34446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169594.355:4833): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169594.355:4834): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169594.491:4835): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169594.491:4836): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169594.550:4837): pid=34462 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169594.551:4838): pid=34462 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676D67756E6E78627876756A7878617268747A676278737A6F646C7369717667203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169594.551:4839): pid=34462 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169594.553:4840): pid=34462 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169594.726:4841): pid=34462 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169594.726:4842): pid=34462 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169594.730:4843): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169594.730:4844): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169594.873:4845): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169594.873:4846): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169594.933:4847): pid=34478 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169594.933:4848): pid=34478 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A736E6C7976626F7771687678716563726C6878756B68756A7263756B6F6E61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169594.934:4849): pid=34478 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169594.936:4850): pid=34478 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169595.118:4851): pid=34478 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169595.118:4852): pid=34478 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169595.122:4853): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169595.122:4854): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169595.211:4855): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169595.211:4856): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169595.270:4857): pid=34494 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169595.270:4858): pid=34494 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626F7162706B7870776E6A666E6D676C746F6E68746577767567677373796671203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169595.271:4859): pid=34494 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169595.274:4860): pid=34494 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169595.445:4861): pid=34494 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169595.445:4862): pid=34494 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169595.449:4863): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169595.449:4864): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169595.524:4865): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169595.525:4866): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169595.572:4867): pid=34510 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169595.572:4868): pid=34510 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706777697763787861706F696F647270676B69686572777377646A6A6872686A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169595.573:4869): pid=34510 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169595.574:4870): pid=34510 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169595.725:4871): pid=34510 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169595.725:4872): pid=34510 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169595.729:4873): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169595.729:4874): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169595.798:4875): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169595.798:4876): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169595.856:4877): pid=34526 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169595.856:4878): pid=34526 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7969787A656F6D737962746965746474787377666F6D62676C6D67637A6D72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169595.857:4879): pid=34526 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169595.860:4880): pid=34526 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169596.026:4881): pid=34526 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169596.027:4882): pid=34526 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169596.030:4883): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169596.030:4884): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169596.086:4885): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169596.086:4886): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169596.140:4887): pid=34542 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169596.140:4888): pid=34542 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6B76707A626C66767477766B7070647062787578746C657079657269727368203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169596.141:4889): pid=34542 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169596.143:4890): pid=34542 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169596.311:4891): pid=34542 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169596.312:4892): pid=34542 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169596.315:4893): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169596.315:4894): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169596.398:4895): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169596.398:4896): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169596.428:4897): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169596.428:4898): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169596.469:4899): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169596.470:4900): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169596.503:4901): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169596.503:4902): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169596.544:4903): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169596.544:4904): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169596.609:4905): pid=34590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169596.610:4906): pid=34590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7379646870747462757663646877676D7A796C6F65706162626F6E696C747A66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169596.611:4907): pid=34590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169596.613:4908): pid=34590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169596.793:4909): pid=34590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169596.793:4910): pid=34590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169596.797:4911): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169596.797:4912): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169596.837:4913): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169596.837:4914): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169596.868:4915): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169596.868:4916): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169596.909:4917): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169596.909:4918): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169596.932:4919): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169596.932:4920): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169596.973:4921): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169596.973:4922): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169597.019:4923): pid=34633 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169597.019:4924): pid=34633 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73757176737366757A78726B616B67726163747A6378696C6A6D6963656B7A72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169597.020:4925): pid=34633 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169597.023:4926): pid=34633 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169597.204:4927): pid=34633 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169597.204:4928): pid=34633 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169597.208:4929): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169597.208:4930): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169597.249:4931): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169597.249:4932): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169597.280:4933): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169597.280:4934): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169597.396:4935): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169597.396:4936): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169597.458:4937): pid=34663 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169597.458:4938): pid=34663 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7379796C63637A767573766A7976706C6E77726C6E627463666B76686D776D7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169597.459:4939): pid=34663 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169597.462:4940): pid=34663 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169597.708:4941): pid=34663 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169597.709:4942): pid=34663 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169597.713:4943): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169597.713:4944): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169598.970:4945): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169598.970:4946): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169599.030:4947): pid=34680 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169599.031:4948): pid=34680 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6D706F7667687276626A666C787377666E756F777965686A7A66636F767376203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169599.031:4949): pid=34680 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169599.034:4950): pid=34680 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169599.184:4951): pid=34680 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169599.185:4952): pid=34680 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169599.189:4953): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169599.189:4954): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169599.612:4955): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169599.612:4956): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169599.672:4957): pid=34696 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169599.672:4958): pid=34696 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6267636B6764726B7364717962637879637061667A696869626667746C706D73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169599.673:4959): pid=34696 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169599.675:4960): pid=34696 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169599.849:4961): pid=34696 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169599.849:4962): pid=34696 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169599.853:4963): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169599.853:4964): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169599.972:4965): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169599.972:4966): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169600.029:4967): pid=34712 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169600.030:4968): pid=34712 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6270636E6B6B6E70677272646178626D6566696968676768766A62746773796C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169600.030:4969): pid=34712 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169600.033:4970): pid=34712 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169600.205:4971): pid=34712 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169600.205:4972): pid=34712 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169600.209:4973): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169600.209:4974): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169600.269:4975): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169600.269:4976): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169600.326:4977): pid=34728 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169600.326:4978): pid=34728 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687261796767696B757A65786E6F796A676469746463707A62736F7A6F726575203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169600.327:4979): pid=34728 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169600.330:4980): pid=34728 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169600.502:4981): pid=34728 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169600.502:4982): pid=34728 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169600.506:4983): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169600.506:4984): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169600.564:4985): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169600.564:4986): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169600.615:4987): pid=34744 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169600.616:4988): pid=34744 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63716C79696F737664636968637862776D6877776E6B69786D69746969786873203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169600.616:4989): pid=34744 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169600.619:4990): pid=34744 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169600.785:4991): pid=34744 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169600.785:4992): pid=34744 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169600.790:4993): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169600.791:4994): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169600.860:4995): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169600.860:4996): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169600.919:4997): pid=34760 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169600.919:4998): pid=34760 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64676C6861706B616A6F787574626165776372716C686C797A71746F796A776A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169600.920:4999): pid=34760 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169600.922:5000): pid=34760 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169601.096:5001): pid=34760 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169601.096:5002): pid=34760 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169601.100:5003): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169601.100:5004): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169601.161:5005): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169601.161:5006): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169601.216:5007): pid=34776 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169601.217:5008): pid=34776 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686B647379636A636B76696C6A64696A6B7862786A6476796C7974707A696872203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169601.217:5009): pid=34776 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169601.219:5010): pid=34776 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169601.398:5011): pid=34776 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169601.398:5012): pid=34776 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169601.401:5013): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169601.401:5014): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169601.479:5015): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169601.479:5016): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169601.527:5017): pid=34792 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169601.528:5018): pid=34792 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62686164656B736A7A6F666C65686E6A636D7A626E627A776975726F78667270203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169601.528:5019): pid=34792 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169601.531:5020): pid=34792 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169601.692:5021): pid=34792 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169601.693:5022): pid=34792 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169601.697:5023): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169601.697:5024): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169601.751:5025): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169601.751:5026): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169601.799:5027): pid=34808 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169601.799:5028): pid=34808 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746D6C6E6461677672616F6C636965717268716B7064667A79707973756F6762203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169601.799:5029): pid=34808 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169601.802:5030): pid=34808 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169601.984:5031): pid=34808 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169601.985:5032): pid=34808 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169601.988:5033): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169601.988:5034): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169602.052:5035): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169602.052:5036): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169602.112:5037): pid=34824 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169602.112:5038): pid=34824 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75676C73737370616670707A66696E746B797970767571707077716D67747664203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169602.113:5039): pid=34824 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169602.116:5040): pid=34824 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169602.297:5041): pid=34824 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169602.298:5042): pid=34824 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169602.301:5043): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169602.301:5044): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169602.392:5045): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169602.392:5046): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169602.440:5047): pid=34840 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169602.440:5048): pid=34840 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74727567697977786F70656F6F696B65637872656B6D716C766561646A716167203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169602.441:5049): pid=34840 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169602.443:5050): pid=34840 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=ADD_GROUP msg=audit(1760169602.616:5051): pid=34843 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-group id=107 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="qemu"
type=GRP_MGMT msg=audit(1760169602.621:5052): pid=34843 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=107 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="qemu"
type=USER_END msg=audit(1760169602.669:5053): pid=34840 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169602.669:5054): pid=34840 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169602.673:5055): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169602.673:5056): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169602.756:5057): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169602.756:5058): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169602.816:5059): pid=34862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169602.816:5060): pid=34862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686775647667627673716F7869736365707665727566736F64636665766A7977203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169602.817:5061): pid=34862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169602.819:5062): pid=34862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=ADD_USER msg=audit(1760169603.031:5063): pid=34866 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user acct="qemu" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MGMT msg=audit(1760169603.085:5064): pid=34866 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-home-dir id=107 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="qemu"
type=USER_END msg=audit(1760169603.120:5065): pid=34862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169603.121:5066): pid=34862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169603.124:5067): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169603.124:5068): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169603.237:5069): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169603.237:5070): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169603.294:5071): pid=34886 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169603.294:5072): pid=34886 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6E6F6B6D79637271707477716E6C68747871766873756876647A716474676B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169603.295:5073): pid=34886 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169603.298:5074): pid=34886 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169603.471:5075): pid=34886 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169603.472:5076): pid=34886 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169603.475:5077): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169603.476:5078): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169603.554:5079): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169603.554:5080): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169603.609:5081): pid=34902 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169603.609:5082): pid=34902 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7771626462677572666E64687876647A78636578686A7A697276786D676B70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169603.610:5083): pid=34902 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169603.612:5084): pid=34902 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169603.791:5085): pid=34902 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169603.791:5086): pid=34902 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169603.794:5087): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169603.794:5088): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169603.952:5089): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169603.952:5090): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169603.981:5091): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169603.982:5092): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169604.022:5093): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169604.022:5094): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169604.057:5095): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169604.057:5096): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169604.098:5097): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169604.098:5098): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169604.157:5099): pid=34951 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169604.158:5100): pid=34951 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7962686B7666697766706C616D66716B766C67716273656E72716C7A65646A62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169604.158:5101): pid=34951 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169604.161:5102): pid=34951 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169604.352:5103): pid=34951 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169604.353:5104): pid=34951 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169604.356:5105): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169604.356:5106): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169604.397:5107): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169604.397:5108): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169604.432:5109): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169604.432:5110): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169604.473:5111): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169604.473:5112): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169604.504:5113): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169604.504:5114): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169604.545:5115): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169604.545:5116): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169604.605:5117): pid=34994 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169604.606:5118): pid=34994 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737778756378686464647473656670786C7A65676A68757769796A6166696172203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169604.606:5119): pid=34994 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169604.609:5120): pid=34994 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169604.779:5121): pid=34994 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169604.780:5122): pid=34994 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169604.783:5123): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169604.783:5124): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169604.814:5125): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169604.814:5126): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169604.845:5127): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169604.845:5128): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169604.949:5129): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169604.950:5130): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169605.000:5131): pid=35024 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169605.001:5132): pid=35024 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71636F7663626B68626A65766F7A6F63767868737963746D736172776F66636F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169605.001:5133): pid=35024 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169605.003:5134): pid=35024 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169605.305:5135): bool=os_enable_vtpm val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=SYSCALL msg=audit(1760169605.305:5135): arch=c000003e syscall=1 success=yes exit=2 a0=5 a1=7ffd891e9ece a2=2 a3=0 items=0 ppid=35024 pid=35026 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="python3" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169605.305:5135): proctitle="/usr/bin/python3"
type=USER_END msg=audit(1760169605.828:5136): pid=35024 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169605.829:5137): pid=35024 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169605.833:5138): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169605.834:5139): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169605.942:5140): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169605.942:5141): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169606.006:5142): pid=35045 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169606.006:5143): pid=35045 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707A71737067726C76616E7062796D6F6D7065776F747971756170716B796B66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169606.007:5144): pid=35045 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169606.012:5145): pid=35045 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169606.185:5146): pid=35045 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169606.186:5147): pid=35045 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169606.190:5148): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169606.190:5149): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169606.322:5150): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169606.322:5151): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169606.384:5152): pid=35061 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169606.384:5153): pid=35061 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676D6D6B627865786D6D71727373627766756E6374767A7A686376627676716A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169606.385:5154): pid=35061 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169606.388:5155): pid=35061 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1760169606.674:5156): bool=logrotate_read_inside_containers val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=SYSCALL msg=audit(1760169606.674:5156): arch=c000003e syscall=1 success=yes exit=2 a0=5 a1=7ffe208eaa4e a2=2 a3=0 items=0 ppid=35061 pid=35063 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="python3" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169606.674:5156): proctitle="/usr/bin/python3"
type=USER_END msg=audit(1760169607.162:5157): pid=35061 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169607.162:5158): pid=35061 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169607.168:5159): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169607.168:5160): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169607.793:5161): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169607.793:5162): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169607.856:5163): pid=35081 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169607.856:5164): pid=35081 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6770636677797A64716D6B77736966656A657873687A666C7669686467696A78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169607.858:5165): pid=35081 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169607.863:5166): pid=35081 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169615.241:5167): pid=35081 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169615.242:5168): pid=35081 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169615.246:5169): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169615.246:5170): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169615.348:5171): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169615.349:5172): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169615.409:5173): pid=35098 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169615.409:5174): pid=35098 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796766796C6F69676B68757672796E6375696B77666C6B72686D716770616863203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169615.409:5175): pid=35098 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169615.412:5176): pid=35098 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169615.872:5177): pid=35098 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169615.873:5178): pid=35098 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169615.876:5179): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169615.876:5180): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169616.151:5181): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169616.152:5182): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169616.198:5183): pid=35159 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169616.198:5184): pid=35159 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7372656D696766797A766F6A6764786171696663746E6B6E63696C6B7272696B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169616.199:5185): pid=35159 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169616.201:5186): pid=35159 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169616.381:5187): pid=35159 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169616.381:5188): pid=35159 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169616.385:5189): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169616.385:5190): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169616.461:5191): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169616.461:5192): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169616.498:5193): pid=35175 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169616.498:5194): pid=35175 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726D6E796B787A77757776766E6F75626171666978626D616763746266686478203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169616.499:5195): pid=35175 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169616.500:5196): pid=35175 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169616.752:5197): pid=35175 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169616.752:5198): pid=35175 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169616.755:5199): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169616.756:5200): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169616.863:5201): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169616.864:5202): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169616.888:5203): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169616.888:5204): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169616.930:5205): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169616.930:5206): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169616.961:5207): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169616.961:5208): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169617.114:5209): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169617.114:5210): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169617.173:5211): pid=35234 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169617.173:5212): pid=35234 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7568686864717869637963776D71676C637871626D747A706264676F6C666A77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169617.173:5213): pid=35234 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169617.175:5214): pid=35234 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169617.343:5215): pid=35234 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169617.343:5216): pid=35234 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169617.347:5217): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169617.347:5218): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169617.378:5219): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169617.378:5220): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169617.415:5221): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169617.415:5222): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169617.456:5223): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169617.456:5224): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169617.482:5225): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169617.482:5226): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169617.523:5227): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169617.523:5228): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169617.566:5229): pid=35277 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169617.566:5230): pid=35277 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646A6963686E65616B72656D6C786E696F6A75726D717073626365687978796B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169617.566:5231): pid=35277 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169617.568:5232): pid=35277 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169617.709:5233): pid=35277 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169617.709:5234): pid=35277 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169617.713:5235): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169617.713:5236): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169617.742:5237): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169617.743:5238): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169617.770:5239): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169617.770:5240): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169617.877:5241): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169617.877:5242): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169617.910:5243): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169617.910:5244): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169617.951:5245): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169617.952:5246): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169617.987:5247): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169617.987:5248): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169618.104:5249): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169618.104:5250): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169618.165:5251): pid=35339 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169618.166:5252): pid=35339 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676578746E7267716B7867746B77776F7769647A7165737A657468726B757464203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169618.166:5253): pid=35339 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169618.169:5254): pid=35339 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169618.355:5255): pid=35339 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169618.355:5256): pid=35339 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169618.358:5257): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169618.359:5258): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169618.399:5259): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169618.399:5260): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169618.435:5261): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169618.435:5262): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169618.492:5263): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169618.492:5264): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169618.523:5265): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169618.523:5266): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169618.563:5267): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169618.563:5268): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169618.612:5269): pid=35384 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169618.613:5270): pid=35384 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687566707474667572636C686D73616173737066716B6E77696F6E6A6669656C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169618.613:5271): pid=35384 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169618.616:5272): pid=35384 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169618.783:5273): pid=35384 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169618.783:5274): pid=35384 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169618.788:5275): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169618.788:5276): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169618.829:5277): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169618.829:5278): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169618.859:5279): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169618.859:5280): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169618.971:5281): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169618.972:5282): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169619.015:5283): pid=35414 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169619.015:5284): pid=35414 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626A6B616C66786C7876646A69616A767A7A67666463646A6675646B77737062203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169619.016:5285): pid=35414 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169619.018:5286): pid=35414 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169619.165:5287): pid=35414 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169619.165:5288): pid=35414 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169619.168:5289): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169619.168:5290): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169619.226:5291): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169619.226:5292): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169619.282:5293): pid=35430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169619.282:5294): pid=35430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6679616B767A6A6B68757972716977666E6E747561796368796D686964726A63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169619.283:5295): pid=35430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169619.285:5296): pid=35430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169619.432:5297): pid=35430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169619.433:5298): pid=35430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169619.435:5299): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169619.436:5300): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169619.486:5301): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169619.486:5302): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169619.544:5303): pid=35446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169619.544:5304): pid=35446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7368726971716379646A6D727776676F776C69726765667167756570746A626A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169619.544:5305): pid=35446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169619.547:5306): pid=35446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169619.723:5307): pid=35446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169619.723:5308): pid=35446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169619.727:5309): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169619.727:5310): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169619.789:5311): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169619.789:5312): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169619.847:5313): pid=35462 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169619.848:5314): pid=35462 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767277767A6870796279627063717067666B6475686C61776B79626F66617065203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169619.848:5315): pid=35462 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169619.851:5316): pid=35462 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169620.009:5317): pid=35462 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169620.009:5318): pid=35462 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169620.012:5319): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169620.012:5320): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169620.339:5321): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169620.339:5322): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169620.367:5323): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169620.367:5324): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169620.407:5325): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169620.407:5326): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169620.442:5327): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169620.442:5328): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169620.482:5329): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169620.482:5330): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169620.543:5331): pid=35510 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169620.544:5332): pid=35510 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6379656D6C656666616676637766666876767870616B71726375726A756166203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169620.544:5333): pid=35510 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169620.547:5334): pid=35510 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169620.764:5335): pid=35510 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169620.765:5336): pid=35510 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169620.769:5337): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169620.769:5338): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169620.794:5339): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169620.794:5340): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169620.827:5341): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169620.827:5342): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169620.869:5343): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169620.869:5344): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169620.901:5345): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169620.901:5346): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169620.941:5347): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169620.941:5348): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169621.000:5349): pid=35553 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169621.000:5350): pid=35553 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A686F677569616878697768747969616E7675646871766F6869736D6A7A67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169621.001:5351): pid=35553 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169621.004:5352): pid=35553 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169621.162:5353): pid=35553 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169621.163:5354): pid=35553 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169621.167:5355): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169621.167:5356): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169621.208:5357): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169621.208:5358): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169621.236:5359): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169621.236:5360): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169621.353:5361): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169621.353:5362): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169621.409:5363): pid=35583 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169621.409:5364): pid=35583 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796962636F6D616D7164707672616A7879686A79706165797567616F74706972203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169621.410:5365): pid=35583 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169621.413:5366): pid=35583 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169621.604:5367): pid=35583 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169621.604:5368): pid=35583 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169621.607:5369): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169621.607:5370): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169621.697:5371): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169621.697:5372): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169621.757:5373): pid=35599 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169621.757:5374): pid=35599 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6172746F61667A686F65757A6D70686C776A637A7061766D6463616377666C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169621.758:5375): pid=35599 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169621.760:5376): pid=35599 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169621.937:5377): pid=35599 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169621.938:5378): pid=35599 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169621.942:5379): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169621.942:5380): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169622.292:5381): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169622.292:5382): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169622.356:5383): pid=35615 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169622.357:5384): pid=35615 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D64626E6773656C697A73616A63767271656A6E6D6E71626279756E6668636E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169622.357:5385): pid=35615 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169622.360:5386): pid=35615 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169631.199:5387): pid=35615 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169631.199:5388): pid=35615 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169631.202:5389): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169631.202:5390): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169631.854:5391): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169631.854:5392): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169631.882:5393): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169631.882:5394): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169631.923:5395): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169631.924:5396): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169631.957:5397): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169631.957:5398): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169632.052:5399): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169632.052:5400): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169632.110:5401): pid=35664 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169632.111:5402): pid=35664 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78796A676A62647A6F6C7A63766373717A67696A617A7A6C6D637561676A7874203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169632.111:5403): pid=35664 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169632.115:5404): pid=35664 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169632.305:5405): pid=35664 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169632.305:5406): pid=35664 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169632.309:5407): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169632.309:5408): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169632.353:5409): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169632.353:5410): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169632.388:5411): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169632.388:5412): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169632.429:5413): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169632.429:5414): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169632.457:5415): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169632.457:5416): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169632.506:5417): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169632.506:5418): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169632.566:5419): pid=35709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169632.567:5420): pid=35709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77786C65687A727878756E6F7975786368747064696F706E6A626275676B6D79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169632.567:5421): pid=35709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169632.571:5422): pid=35709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169632.764:5423): pid=35709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169632.764:5424): pid=35709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169632.768:5425): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169632.768:5426): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169632.795:5427): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169632.795:5428): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169632.825:5429): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169632.825:5430): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169632.962:5431): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169632.962:5432): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169633.014:5433): pid=35740 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169633.014:5434): pid=35740 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696A72776E71637767636C70626C667768666C696D686F6F646D6375647A7771203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169633.015:5435): pid=35740 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169633.018:5436): pid=35740 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1760169633.302:5437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760169633.335:5438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760169633.363:5439): pid=35740 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169633.364:5440): pid=35740 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169633.368:5441): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169633.368:5442): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169633.505:5443): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169633.505:5444): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169633.567:5445): pid=35760 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169633.567:5446): pid=35760 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6F6870657763767A6F696566696D6E71666C636863776466636B6669716164203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169633.568:5447): pid=35760 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169633.571:5448): pid=35760 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169633.770:5449): pid=35760 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169633.770:5450): pid=35760 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169633.773:5451): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169633.773:5452): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169634.546:5453): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169634.546:5454): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169634.604:5455): pid=35778 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169634.604:5456): pid=35778 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6C7A6F666C726E776E7A746B797978696E6E73656264796C6B667372646872203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169634.605:5457): pid=35778 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169634.608:5458): pid=35778 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169634.799:5459): pid=35778 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169634.799:5460): pid=35778 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169634.802:5461): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169634.802:5462): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169635.019:5463): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169635.019:5464): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169635.080:5465): pid=35796 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169635.080:5466): pid=35796 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6863797275706962727166716761666D6862626D626E686573696F68766973203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169635.081:5467): pid=35796 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169635.083:5468): pid=35796 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169638.472:5469): pid=35796 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169638.473:5470): pid=35796 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169638.478:5471): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169638.478:5472): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169638.891:5473): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169638.891:5474): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169638.921:5475): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169638.921:5476): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169638.962:5477): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169638.962:5478): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169639.001:5479): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169639.001:5480): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169639.164:5481): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169639.164:5482): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169639.227:5483): pid=35845 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169639.227:5484): pid=35845 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6478617A777A73687A7A73797A6262706D6478686261716770796D717570796D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169639.228:5485): pid=35845 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169639.230:5486): pid=35845 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169639.422:5487): pid=35845 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169639.423:5488): pid=35845 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169639.426:5489): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169639.426:5490): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169639.468:5491): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169639.468:5492): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169639.506:5493): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169639.506:5494): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169639.547:5495): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169639.547:5496): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169639.581:5497): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169639.581:5498): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169639.622:5499): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169639.622:5500): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169639.685:5501): pid=35890 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169639.686:5502): pid=35890 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656C7373687472786A68616B6F736E767774756276626A6E77766465647A6C68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169639.686:5503): pid=35890 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169639.689:5504): pid=35890 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169639.865:5505): pid=35890 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169639.866:5506): pid=35890 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169639.869:5507): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169639.869:5508): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169639.900:5509): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169639.900:5510): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169639.922:5511): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169639.922:5512): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169640.338:5513): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169640.338:5514): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169640.387:5515): pid=35920 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169640.387:5516): pid=35920 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6E6B766F7A6A716174776E786F6C696A7469776275737879656E696A78637A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169640.388:5517): pid=35920 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169640.391:5518): pid=35920 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169640.671:5519): pid=35920 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169640.671:5520): pid=35920 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169640.676:5521): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169640.677:5522): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169640.800:5523): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169640.800:5524): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169640.864:5525): pid=35938 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169640.864:5526): pid=35938 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D707275766D666775776C7A76706561617378616C727179726F75716C70696B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169640.864:5527): pid=35938 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169640.867:5528): pid=35938 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1760169641.122:5529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760169641.126:5530): prog-id=152 op=LOAD
type=BPF msg=audit(1760169641.131:5531): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1760169641.186:5532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760169641.216:5533): pid=35938 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169641.217:5534): pid=35938 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169641.222:5535): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169641.222:5536): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169641.443:5537): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169641.443:5538): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169641.475:5539): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169641.475:5540): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169641.516:5541): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169641.517:5542): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169641.548:5543): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169641.548:5544): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169641.590:5545): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169641.590:5546): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169641.634:5547): pid=35994 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169641.634:5548): pid=35994 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7A657073687A796B76787665726972746C7979656165626E6A65656F627967203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169641.635:5549): pid=35994 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169641.637:5550): pid=35994 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169641.790:5551): pid=35994 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169641.790:5552): pid=35994 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169641.794:5553): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169641.794:5554): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169641.842:5555): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169641.842:5556): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169641.879:5557): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169641.879:5558): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169641.920:5559): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169641.920:5560): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169641.952:5561): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169641.952:5562): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169641.993:5563): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169641.994:5564): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169642.055:5565): pid=36037 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169642.055:5566): pid=36037 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766A6C6B69696268767872716B6C696D65626D6F66616A6A74656A7379626F62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169642.056:5567): pid=36037 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169642.059:5568): pid=36037 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169642.245:5569): pid=36037 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169642.246:5570): pid=36037 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169642.249:5571): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169642.249:5572): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169642.292:5573): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169642.292:5574): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169642.322:5575): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169642.322:5576): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169642.406:5577): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169642.406:5578): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169642.461:5579): pid=36067 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169642.461:5580): pid=36067 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7865617A77797067706B67746E77756B636868797A7A79617A69677362686976203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169642.462:5581): pid=36067 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169642.464:5582): pid=36067 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1760169642.946:5583): prog-id=153 op=LOAD
type=BPF msg=audit(1760169642.946:5584): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169642.949:5585): prog-id=154 op=LOAD
type=BPF msg=audit(1760169642.949:5586): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169642.949:5587): prog-id=155 op=LOAD
type=BPF msg=audit(1760169642.949:5588): prog-id=156 op=LOAD
type=BPF msg=audit(1760169642.949:5589): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169642.949:5590): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169642.950:5591): prog-id=157 op=LOAD
type=BPF msg=audit(1760169642.950:5592): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169642.950:5593): prog-id=158 op=LOAD
type=BPF msg=audit(1760169642.950:5594): prog-id=159 op=LOAD
type=BPF msg=audit(1760169642.950:5595): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169642.950:5596): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169642.951:5597): prog-id=160 op=LOAD
type=BPF msg=audit(1760169642.951:5598): prog-id=161 op=LOAD
type=BPF msg=audit(1760169642.951:5599): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169642.951:5600): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169642.952:5601): prog-id=162 op=LOAD
type=BPF msg=audit(1760169642.952:5602): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169643.165:5603): prog-id=163 op=LOAD
type=BPF msg=audit(1760169643.165:5604): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169643.168:5605): prog-id=164 op=LOAD
type=BPF msg=audit(1760169643.168:5606): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169643.168:5607): prog-id=165 op=LOAD
type=BPF msg=audit(1760169643.168:5608): prog-id=166 op=LOAD
type=BPF msg=audit(1760169643.168:5609): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169643.168:5610): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169643.169:5611): prog-id=167 op=LOAD
type=BPF msg=audit(1760169643.169:5612): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169643.169:5613): prog-id=168 op=LOAD
type=BPF msg=audit(1760169643.169:5614): prog-id=169 op=LOAD
type=BPF msg=audit(1760169643.169:5615): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169643.169:5616): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169643.170:5617): prog-id=170 op=LOAD
type=BPF msg=audit(1760169643.170:5618): prog-id=171 op=LOAD
type=BPF msg=audit(1760169643.170:5619): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169643.170:5620): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169643.171:5621): prog-id=172 op=LOAD
type=BPF msg=audit(1760169643.171:5622): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1760169643.196:5623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chrony-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760169643.196:5624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chrony-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760169643.223:5625): pid=36067 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169643.224:5626): pid=36067 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169643.228:5627): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169643.228:5628): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169643.432:5629): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169643.433:5630): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169643.494:5631): pid=36158 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169643.494:5632): pid=36158 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7976726267797A66656B656C7879627664726A76616C717A71766D75616F6370203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169643.495:5633): pid=36158 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169643.501:5634): pid=36158 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169643.661:5635): pid=36158 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169643.661:5636): pid=36158 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169643.664:5637): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169643.664:5638): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169643.768:5639): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169643.768:5640): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169643.824:5641): pid=36175 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169643.824:5642): pid=36175 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7767787763776A7A6E686A7A78617867717079696B64746E65696164746A6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169643.825:5643): pid=36175 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169643.827:5644): pid=36175 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169654.022:5645): pid=36175 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169654.022:5646): pid=36175 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169654.026:5647): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169654.026:5648): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169654.138:5649): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169654.138:5650): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169654.196:5651): pid=36192 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169654.196:5652): pid=36192 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64786376646367707770756167686C6E75696978666C627A7A67706E61757978203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169654.197:5653): pid=36192 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169654.201:5654): pid=36192 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169654.380:5655): pid=36192 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169654.380:5656): pid=36192 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169654.383:5657): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169654.383:5658): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169654.480:5659): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169654.480:5660): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169654.541:5661): pid=36209 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169654.542:5662): pid=36209 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A64777A7370677A6B6869777477757870687374687579766F6B6E74787A7370203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169654.542:5663): pid=36209 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169654.545:5664): pid=36209 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169654.717:5665): pid=36209 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169654.717:5666): pid=36209 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169654.720:5667): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169654.721:5668): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169655.212:5669): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169655.212:5670): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169655.276:5671): pid=36226 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169655.276:5672): pid=36226 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63656F616F676D78767269746762736B687666766875747268736E77717A7673203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169655.277:5673): pid=36226 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169655.279:5674): pid=36226 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1760169655.469:5675): prog-id=173 op=LOAD
type=BPF msg=audit(1760169655.470:5676): prog-id=174 op=LOAD
type=BPF msg=audit(1760169655.470:5677): prog-id=175 op=LOAD
type=SERVICE_START msg=audit(1760169655.552:5678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760169655.603:5679): pid=36226 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169655.603:5680): pid=36226 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169655.607:5681): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169655.607:5682): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169656.317:5683): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169656.317:5684): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169656.376:5685): pid=36246 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169656.376:5686): pid=36246 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61667372727A64696B76786C6368746A66616A71686D6D73737A6A6769676277203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169656.377:5687): pid=36246 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169656.380:5688): pid=36246 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169656.576:5689): pid=36246 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169656.576:5690): pid=36246 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169656.581:5691): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169656.581:5692): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169656.792:5693): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169656.792:5694): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169656.849:5695): pid=36263 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169656.850:5696): pid=36263 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7761626C697762787A65656465647966676C7765786377687573786678666C203B20504154483D2F62696E3A2F7573722F62696E3A2F7362696E3A2F7573722F7362696E202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169656.850:5697): pid=36263 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169656.853:5698): pid=36263 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169657.026:5699): pid=36263 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169657.026:5700): pid=36263 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169657.030:5701): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169657.031:5702): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169657.429:5703): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169657.429:5704): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169657.482:5705): pid=36280 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169657.482:5706): pid=36280 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756C68626E72627A686B63626C6167646468796E6F64726468726778787A7A64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169657.483:5707): pid=36280 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169657.485:5708): pid=36280 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169657.653:5709): pid=36280 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169657.653:5710): pid=36280 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169657.657:5711): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169657.657:5712): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169657.842:5713): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169657.842:5714): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169657.893:5715): pid=36296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169657.893:5716): pid=36296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767273706576637574726D686563666A636E786E6F776E73646D736B6461756E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169657.893:5717): pid=36296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169657.896:5718): pid=36296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169658.065:5719): pid=36296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169658.066:5720): pid=36296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169658.069:5721): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169658.069:5722): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169658.517:5723): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169658.517:5724): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169658.570:5725): pid=36312 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169658.570:5726): pid=36312 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7978626E656E726572627770687770696C7A6D727878656E73636977697A6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169658.571:5727): pid=36312 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169658.573:5728): pid=36312 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169658.753:5729): pid=36312 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169658.754:5730): pid=36312 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169658.757:5731): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169658.757:5732): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169658.838:5733): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169658.838:5734): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169658.895:5735): pid=36328 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169658.896:5736): pid=36328 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6C6C6869736A6B626E737A697174706A776F7A76766D6361696F68756C796B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169658.896:5737): pid=36328 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169658.899:5738): pid=36328 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169659.068:5739): pid=36328 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169659.068:5740): pid=36328 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169659.072:5741): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169659.072:5742): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169659.345:5743): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169659.345:5744): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169659.375:5745): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169659.375:5746): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169659.416:5747): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169659.416:5748): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169659.450:5749): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169659.450:5750): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169659.491:5751): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169659.491:5752): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169659.545:5753): pid=36376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169659.545:5754): pid=36376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7278756E626D6E6F6A716C6C6B677A70717574696E69696771646A677A676964203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169659.546:5755): pid=36376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169659.550:5756): pid=36376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169659.722:5757): pid=36376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169659.722:5758): pid=36376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169659.726:5759): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169659.726:5760): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169659.768:5761): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169659.768:5762): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169659.803:5763): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169659.803:5764): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169659.844:5765): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169659.844:5766): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169659.868:5767): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169659.868:5768): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169659.909:5769): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169659.910:5770): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169659.969:5771): pid=36419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169659.969:5772): pid=36419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636A76616D727670667868697965766E75717173657378716179696A73717065203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169659.970:5773): pid=36419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169659.973:5774): pid=36419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169660.161:5775): pid=36419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169660.161:5776): pid=36419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169660.165:5777): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169660.165:5778): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169660.206:5779): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169660.206:5780): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169660.237:5781): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169660.238:5782): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169660.372:5783): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169660.372:5784): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169660.401:5785): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169660.401:5786): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169660.441:5787): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169660.442:5788): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169660.477:5789): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169660.477:5790): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169660.519:5791): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169660.519:5792): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169660.577:5793): pid=36481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169660.577:5794): pid=36481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A626167726979666E6E626E77737570706B647768706F706F647A6569786877203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169660.578:5795): pid=36481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169660.580:5796): pid=36481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169660.745:5797): pid=36481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169660.745:5798): pid=36481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169660.751:5799): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169660.751:5800): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169660.792:5801): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169660.792:5802): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169660.826:5803): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169660.826:5804): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169660.867:5805): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169660.867:5806): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169660.898:5807): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169660.898:5808): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169660.938:5809): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169660.939:5810): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169660.997:5811): pid=36524 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169660.998:5812): pid=36524 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617974776D65656C77746974636F756F7473716879777A717A777178716B6C72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169660.999:5813): pid=36524 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169661.002:5814): pid=36524 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169661.183:5815): pid=36524 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169661.184:5816): pid=36524 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169661.188:5817): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169661.189:5818): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169661.229:5819): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169661.229:5820): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169661.262:5821): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169661.263:5822): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169661.373:5823): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169661.373:5824): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169661.433:5825): pid=36554 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169661.433:5826): pid=36554 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A796D67706B76786D767864646A64726E6466677A6D61776370637870706570203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169661.434:5827): pid=36554 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169661.437:5828): pid=36554 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1760169661.960:5829): prog-id=176 op=LOAD
type=BPF msg=audit(1760169661.960:5830): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169661.962:5831): prog-id=177 op=LOAD
type=BPF msg=audit(1760169661.962:5832): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169661.962:5833): prog-id=178 op=LOAD
type=BPF msg=audit(1760169661.962:5834): prog-id=179 op=LOAD
type=BPF msg=audit(1760169661.962:5835): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169661.962:5836): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169661.963:5837): prog-id=180 op=LOAD
type=BPF msg=audit(1760169661.963:5838): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169661.963:5839): prog-id=181 op=LOAD
type=BPF msg=audit(1760169661.963:5840): prog-id=182 op=LOAD
type=BPF msg=audit(1760169661.963:5841): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169661.963:5842): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169661.964:5843): prog-id=183 op=LOAD
type=BPF msg=audit(1760169661.964:5844): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169661.964:5845): prog-id=184 op=LOAD
type=BPF msg=audit(1760169661.964:5846): prog-id=185 op=LOAD
type=BPF msg=audit(1760169661.964:5847): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169661.964:5848): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169661.965:5849): prog-id=186 op=LOAD
type=BPF msg=audit(1760169661.965:5850): prog-id=187 op=LOAD
type=BPF msg=audit(1760169661.965:5851): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169661.965:5852): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169661.966:5853): prog-id=188 op=LOAD
type=BPF msg=audit(1760169661.966:5854): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1760169662.004:5855): pid=36554 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169662.004:5856): pid=36554 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169662.011:5857): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169662.011:5858): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169662.149:5859): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169662.149:5860): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169662.215:5861): pid=36619 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169662.216:5862): pid=36619 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656E636A7A68687A616A796171717063666A68706B6A756F676F6D7961617461203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169662.216:5863): pid=36619 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169662.221:5864): pid=36619 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169662.417:5865): pid=36619 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169662.417:5866): pid=36619 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169662.421:5867): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169662.422:5868): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169662.493:5869): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169662.493:5870): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169662.538:5871): pid=36635 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169662.538:5872): pid=36635 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79617478686264627074677963736F6C646C7470766C6365646D6B786F6F6A6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169662.538:5873): pid=36635 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169662.540:5874): pid=36635 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169662.729:5875): pid=36635 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169662.730:5876): pid=36635 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169662.734:5877): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169662.734:5878): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169662.831:5879): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169662.832:5880): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169662.892:5881): pid=36653 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169662.892:5882): pid=36653 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786361727963717A646F6C76766C7A666B617276627075776A7076736B6D7873203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169662.893:5883): pid=36653 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169662.895:5884): pid=36653 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169663.069:5885): pid=36653 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169663.069:5886): pid=36653 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169663.073:5887): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169663.073:5888): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169663.171:5889): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169663.171:5890): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169663.232:5891): pid=36670 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169663.232:5892): pid=36670 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636975646F6268766D65716A68737462667464706B6964746D64746F64787862203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169663.233:5893): pid=36670 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169663.235:5894): pid=36670 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169663.402:5895): pid=36670 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169663.403:5896): pid=36670 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169663.406:5897): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169663.406:5898): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169663.574:5899): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169663.574:5900): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169663.634:5901): pid=36686 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169663.634:5902): pid=36686 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7575797A7762726C77687A796B6F696577666D6D646468776B6577697A76766A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169663.634:5903): pid=36686 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169663.637:5904): pid=36686 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169663.804:5905): pid=36686 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169663.805:5906): pid=36686 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169663.809:5907): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169663.809:5908): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169663.940:5909): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169663.940:5910): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169663.970:5911): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169663.970:5912): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169664.010:5913): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169664.011:5914): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169664.047:5915): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169664.048:5916): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169664.088:5917): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169664.089:5918): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169664.148:5919): pid=36734 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169664.148:5920): pid=36734 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74667779717374756E736B6C6573676A666D696A79747670796961696C706F70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169664.149:5921): pid=36734 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169664.150:5922): pid=36734 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169664.307:5923): pid=36734 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169664.307:5924): pid=36734 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169664.311:5925): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169664.311:5926): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169664.352:5927): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169664.352:5928): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169664.390:5929): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169664.390:5930): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169664.430:5931): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169664.430:5932): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169664.461:5933): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169664.461:5934): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169664.502:5935): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169664.503:5936): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169664.552:5937): pid=36777 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169664.553:5938): pid=36777 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636368736C7172786B6878656E786C766168777A647270636C67737366726577203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169664.554:5939): pid=36777 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169664.557:5940): pid=36777 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169664.733:5941): pid=36777 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169664.733:5942): pid=36777 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169664.738:5943): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169664.738:5944): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169664.779:5945): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169664.780:5946): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169664.804:5947): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169664.804:5948): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1760169685.588:5949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760169685.600:5950): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169685.600:5951): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169685.600:5952): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1760169685.659:5953): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169685.659:5954): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169685.720:5955): pid=36810 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169685.720:5956): pid=36810 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64706A6E7575767078626B7572736D657874627268676B676773696575686F6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169685.721:5957): pid=36810 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169685.723:5958): pid=36810 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169685.903:5959): pid=36810 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169685.903:5960): pid=36810 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169685.908:5961): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169685.908:5962): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169686.009:5963): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169686.009:5964): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169686.068:5965): pid=36826 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169686.068:5966): pid=36826 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6466686C746B797A76716D73646775747178676C67626E686B686B7678777579203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169686.069:5967): pid=36826 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169686.071:5968): pid=36826 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169686.249:5969): pid=36826 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169686.249:5970): pid=36826 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169686.252:5971): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169686.253:5972): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169686.407:5973): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169686.407:5974): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169686.467:5975): pid=36842 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169686.468:5976): pid=36842 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C636B746D6D746278736D67726467776F757966696968737573646B736D736D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169686.468:5977): pid=36842 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169686.471:5978): pid=36842 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169686.679:5979): pid=36842 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169686.679:5980): pid=36842 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169686.683:5981): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169686.683:5982): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169686.774:5983): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169686.774:5984): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169686.821:5985): pid=36858 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169686.821:5986): pid=36858 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6578666B6F626B6E6D696C6E6F707A68786D6D73746F7A756C666A6369616A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169686.821:5987): pid=36858 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169686.823:5988): pid=36858 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169686.971:5989): pid=36858 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169686.971:5990): pid=36858 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169686.974:5991): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169686.974:5992): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169687.088:5993): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169687.088:5994): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169687.133:5995): pid=36874 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169687.133:5996): pid=36874 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6573796E6B6B727564707077716C6E616764727078736F6A65656D6561766F75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169687.134:5997): pid=36874 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169687.136:5998): pid=36874 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169687.288:5999): pid=36874 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169687.288:6000): pid=36874 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169687.291:6001): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169687.291:6002): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169687.377:6003): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169687.377:6004): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169687.428:6005): pid=36890 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169687.428:6006): pid=36890 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646D6177617379737A6877786767786C6672786E75657A6D65676C767877786A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169687.428:6007): pid=36890 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169687.430:6008): pid=36890 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_POLICY_LOAD msg=audit(1760169688.340:6009): auid=1002 ses=14 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1760169688.340:6009): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7f45c2800000 a2=36aa51 a3=0 items=0 ppid=36892 pid=36900 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169688.340:6009): proctitle="/sbin/load_policy"
type=USER_MAC_CONFIG_CHANGE msg=audit(1760169688.493:6010): pid=36892 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/container-config-scripts(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1760169688.526:6011): pid=36890 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169688.527:6012): pid=36890 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169688.532:6013): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169688.532:6014): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169688.603:6015): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169688.603:6016): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169688.656:6017): pid=36914 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169688.657:6018): pid=36914 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706B71717062756776697868756C7A7A7A6566617563626E6B64767868767271203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169688.657:6019): pid=36914 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169688.663:6020): pid=36914 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169688.819:6021): pid=36914 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169688.819:6022): pid=36914 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169688.822:6023): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169688.822:6024): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169689.111:6025): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169689.111:6026): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169689.172:6027): pid=36930 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169689.172:6028): pid=36930 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776469656D746677726C6268756979757366786164666E766E6E79647A6F7367203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169689.173:6029): pid=36930 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169689.175:6030): pid=36930 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169689.353:6031): pid=36930 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169689.353:6032): pid=36930 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169689.359:6033): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169689.359:6034): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169689.429:6035): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169689.429:6036): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169689.457:6037): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169689.457:6038): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169689.499:6039): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169689.499:6040): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169689.535:6041): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169689.535:6042): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169689.576:6043): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169689.576:6044): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169689.637:6045): pid=36978 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169689.638:6046): pid=36978 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746B6E6267646D6C6671716F7467676679776B756A777962776A657278727771203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169689.638:6047): pid=36978 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169689.641:6048): pid=36978 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169689.828:6049): pid=36978 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169689.828:6050): pid=36978 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169689.831:6051): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169689.831:6052): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169689.872:6053): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169689.873:6054): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169689.911:6055): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169689.912:6056): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169689.952:6057): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169689.952:6058): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169689.983:6059): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169689.983:6060): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169690.023:6061): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169690.023:6062): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169690.082:6063): pid=37021 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169690.082:6064): pid=37021 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79696D6E6B616A6E696369686E70756F73736B6A6C736A61716D626662697676203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169690.083:6065): pid=37021 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169690.085:6066): pid=37021 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169690.275:6067): pid=37021 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169690.275:6068): pid=37021 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169690.278:6069): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169690.278:6070): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169690.320:6071): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169690.320:6072): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169690.341:6073): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169690.341:6074): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169690.797:6075): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169690.797:6076): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169690.856:6077): pid=37051 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169690.856:6078): pid=37051 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716370716A69636B6B6D73717763796F636B6E72747079666867646C61796C76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169690.857:6079): pid=37051 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169690.859:6080): pid=37051 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169691.071:6081): pid=37051 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169691.071:6082): pid=37051 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169691.074:6083): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169691.074:6084): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169691.445:6085): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169691.445:6086): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169691.504:6087): pid=37067 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169691.505:6088): pid=37067 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6973796573706270646478666A7A7676736873667767716972686462736B61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169691.505:6089): pid=37067 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169691.508:6090): pid=37067 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169691.680:6091): pid=37067 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169691.681:6092): pid=37067 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169691.684:6093): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169691.685:6094): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169691.787:6095): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169691.788:6096): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169691.850:6097): pid=37083 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169691.850:6098): pid=37083 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7677667465706C666B67767561766573667877786F6570727468647A7173637A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169691.850:6099): pid=37083 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169691.852:6100): pid=37083 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169692.021:6101): pid=37083 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169692.021:6102): pid=37083 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169692.025:6103): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169692.025:6104): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169692.184:6105): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169692.184:6106): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169692.233:6107): pid=37099 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169692.233:6108): pid=37099 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62776B7A626564677770677A6767666A6F6675737A72716B6C716A6D70657466203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169692.234:6109): pid=37099 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169692.236:6110): pid=37099 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169692.426:6111): pid=37099 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169692.427:6112): pid=37099 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169692.430:6113): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169692.430:6114): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169698.722:6115): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169698.722:6116): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169698.781:6117): pid=37116 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169698.781:6118): pid=37116 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7465746B63677175756A717273656D71696D7073786863766D756F6E71647866203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169698.782:6119): pid=37116 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169698.784:6120): pid=37116 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169698.944:6121): pid=37116 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169698.944:6122): pid=37116 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169698.972:6123): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169698.972:6124): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169700.468:6125): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169700.468:6126): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169700.529:6127): pid=37132 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169700.529:6128): pid=37132 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777770786E6578716A6F6378646861797A62736F6D786F6C717268796179656F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169700.530:6129): pid=37132 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169700.533:6130): pid=37132 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169701.203:6131): pid=37132 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169701.203:6132): pid=37132 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169701.208:6133): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169701.208:6134): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169701.327:6135): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169701.327:6136): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169701.394:6137): pid=37154 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169701.394:6138): pid=37154 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62656F7973756D687A6D737676716C687176637278706675656A61616F656C71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169701.394:6139): pid=37154 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169701.398:6140): pid=37154 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169701.563:6141): pid=37154 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169701.563:6142): pid=37154 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169701.567:6143): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169701.567:6144): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169701.691:6145): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169701.691:6146): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169701.750:6147): pid=37170 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169701.751:6148): pid=37170 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786F6E666B78686E707A706E6F6E6E6C7069746F726E786272726D786A657772203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169701.751:6149): pid=37170 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169701.754:6150): pid=37170 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1760169702.618:6151): prog-id=189 op=LOAD
type=BPF msg=audit(1760169702.618:6152): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169702.621:6153): prog-id=190 op=LOAD
type=BPF msg=audit(1760169702.621:6154): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169702.621:6155): prog-id=191 op=LOAD
type=BPF msg=audit(1760169702.621:6156): prog-id=192 op=LOAD
type=BPF msg=audit(1760169702.621:6157): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169702.621:6158): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169702.622:6159): prog-id=193 op=LOAD
type=BPF msg=audit(1760169702.622:6160): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169702.622:6161): prog-id=194 op=LOAD
type=BPF msg=audit(1760169702.623:6162): prog-id=195 op=LOAD
type=BPF msg=audit(1760169702.623:6163): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169702.623:6164): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169702.623:6165): prog-id=196 op=LOAD
type=BPF msg=audit(1760169702.623:6166): prog-id=197 op=LOAD
type=BPF msg=audit(1760169702.623:6167): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169702.623:6168): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169702.624:6169): prog-id=198 op=LOAD
type=BPF msg=audit(1760169702.624:6170): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1760169702.653:6171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760169702.656:6172): prog-id=199 op=LOAD
type=BPF msg=audit(1760169702.663:6173): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1760169702.717:6174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760169708.838:6175): pid=37170 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169708.838:6176): pid=37170 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169708.842:6177): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169708.842:6178): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169709.344:6179): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169709.344:6180): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169709.390:6181): pid=37239 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169709.390:6182): pid=37239 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6165656178796664776C6E646A7972756D68716F686F707473677A7475647177203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169709.391:6183): pid=37239 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169709.394:6184): pid=37239 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169709.916:6185): pid=37239 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169709.916:6186): pid=37239 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169709.920:6187): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169709.920:6188): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169711.086:6189): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169711.086:6190): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169711.151:6191): pid=37260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169711.151:6192): pid=37260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786C736561646E726B756A647572796E7562636D6E6F6E786879716978646169203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169711.152:6193): pid=37260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169711.155:6194): pid=37260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169711.324:6195): pid=37260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169711.324:6196): pid=37260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169711.327:6197): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169711.327:6198): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169711.613:6199): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169711.613:6200): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169711.670:6201): pid=37277 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169711.671:6202): pid=37277 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A676B77766168746B7972636266727275646C6B6E7A7178626A69656C676C6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169711.672:6203): pid=37277 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169711.675:6204): pid=37277 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1760169712.139:6205): prog-id=200 op=LOAD
type=BPF msg=audit(1760169712.139:6206): prog-id=201 op=LOAD
type=SERVICE_START msg=audit(1760169712.219:6207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760169712.280:6208): pid=37277 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169712.280:6209): pid=37277 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169712.285:6210): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169712.285:6211): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169712.618:6212): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169712.618:6213): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169712.686:6214): pid=37296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169712.686:6215): pid=37296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77777A7163667A7A777A727965646873786565696F756168656A70727A756172203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169712.686:6216): pid=37296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169712.690:6217): pid=37296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169713.242:6218): pid=37296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169713.242:6219): pid=37296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169713.246:6220): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169713.246:6221): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169713.606:6222): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169713.606:6223): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169713.663:6224): pid=37317 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169713.663:6225): pid=37317 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77717375636E7575766C6E72616F7365647175686B7973746F64796565736B6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169713.665:6226): pid=37317 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169713.667:6227): pid=37317 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169714.750:6228): pid=37317 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169714.751:6229): pid=37317 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169714.755:6230): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169714.755:6231): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169715.382:6232): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169715.382:6233): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169715.442:6234): pid=37338 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169715.442:6235): pid=37338 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75686A6A7A6A6267777A756973707A696B7369696F6F7A706B7A6F6B747A7477203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169715.442:6236): pid=37338 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169715.444:6237): pid=37338 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169715.951:6238): pid=37338 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169715.951:6239): pid=37338 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169715.954:6240): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169715.954:6241): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169716.269:6242): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169716.269:6243): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169716.329:6244): pid=37355 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169716.330:6245): pid=37355 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746676656170656D7275726867666A746A706977777474797969616F6B746D63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169716.331:6246): pid=37355 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169716.334:6247): pid=37355 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169716.854:6248): pid=37355 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169716.855:6249): pid=37355 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169716.859:6250): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169716.859:6251): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169717.194:6252): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169717.194:6253): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169717.252:6254): pid=37372 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169717.252:6255): pid=37372 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6D69686F7A77676365777672616375616A6D6B67697861616971646E647374203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169717.253:6256): pid=37372 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169717.256:6257): pid=37372 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169719.280:6258): pid=37372 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169719.280:6259): pid=37372 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169719.284:6260): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169719.284:6261): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169719.599:6262): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169719.599:6263): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169719.661:6264): pid=37401 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169719.661:6265): pid=37401 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E646E6A6B797176637071696D6C68667764646E76677965796A666579796B69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169719.662:6266): pid=37401 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169719.664:6267): pid=37401 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1760169722.802:6268): pid=37435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c0:c8:7b:b2:da:94:49:86:56:dc:db:03:99:8d:a0:47:a4:3e:5c:d9:a5:6c:4d:9d:69:67:b1:8a:d6:02:89:ab direction=? spid=37435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1760169724.002:6269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760169724.274:6270): prog-id=202 op=LOAD
type=BPF msg=audit(1760169724.274:6271): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169724.276:6272): prog-id=203 op=LOAD
type=BPF msg=audit(1760169724.276:6273): prog-id=204 op=LOAD
type=BPF msg=audit(1760169724.276:6274): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169724.276:6275): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169724.277:6276): prog-id=205 op=LOAD
type=BPF msg=audit(1760169724.277:6277): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169724.277:6278): prog-id=206 op=LOAD
type=BPF msg=audit(1760169724.277:6279): prog-id=207 op=LOAD
type=BPF msg=audit(1760169724.277:6280): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169724.277:6281): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169724.278:6282): prog-id=208 op=LOAD
type=BPF msg=audit(1760169724.278:6283): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169724.278:6284): prog-id=209 op=LOAD
type=BPF msg=audit(1760169724.278:6285): prog-id=210 op=LOAD
type=BPF msg=audit(1760169724.278:6286): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169724.278:6287): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169724.279:6288): prog-id=211 op=LOAD
type=BPF msg=audit(1760169724.279:6289): prog-id=212 op=LOAD
type=BPF msg=audit(1760169724.279:6290): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169724.279:6291): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169724.280:6292): prog-id=213 op=LOAD
type=BPF msg=audit(1760169724.280:6293): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1760169724.494:6294): pid=37401 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169724.494:6295): pid=37401 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169724.499:6296): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169724.499:6297): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169724.835:6298): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169724.835:6299): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169724.899:6300): pid=37499 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169724.899:6301): pid=37499 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E62766868766C62736F6D736364796C6479797866666B6575626C6579726F75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169724.900:6302): pid=37499 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169724.905:6303): pid=37499 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1760169725.411:6304): pid=35746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c0:c8:7b:b2:da:94:49:86:56:dc:db:03:99:8d:a0:47:a4:3e:5c:d9:a5:6c:4d:9d:69:67:b1:8a:d6:02:89:ab direction=? spid=35746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1760169725.413:6305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760169725.436:6306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760169725.528:6307): pid=37499 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169725.529:6308): pid=37499 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169725.533:6309): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169725.534:6310): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169725.892:6311): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169725.892:6312): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169725.960:6313): pid=37521 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169725.961:6314): pid=37521 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656B706F6A786A6C6266767879686162736D64637773756C6B73636875616F61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169725.961:6315): pid=37521 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169725.964:6316): pid=37521 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169726.448:6317): pid=37521 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169726.448:6318): pid=37521 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169726.452:6319): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169726.452:6320): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169726.884:6321): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169726.884:6322): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169726.940:6323): pid=37538 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169726.941:6324): pid=37538 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7968706F77616B6E676A63716A6164757378737365787378747361786A786F68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169726.941:6325): pid=37538 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169726.943:6326): pid=37538 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1760169727.625:6327): prog-id=214 op=LOAD
type=BPF msg=audit(1760169727.625:6328): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169727.627:6329): prog-id=215 op=LOAD
type=BPF msg=audit(1760169727.627:6330): prog-id=216 op=LOAD
type=BPF msg=audit(1760169727.627:6331): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169727.627:6332): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169727.629:6333): prog-id=217 op=LOAD
type=BPF msg=audit(1760169727.629:6334): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169727.629:6335): prog-id=218 op=LOAD
type=BPF msg=audit(1760169727.629:6336): prog-id=219 op=LOAD
type=BPF msg=audit(1760169727.629:6337): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169727.629:6338): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169727.630:6339): prog-id=220 op=LOAD
type=BPF msg=audit(1760169727.630:6340): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169727.630:6341): prog-id=221 op=LOAD
type=BPF msg=audit(1760169727.630:6342): prog-id=222 op=LOAD
type=BPF msg=audit(1760169727.630:6343): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169727.630:6344): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169727.631:6345): prog-id=223 op=LOAD
type=BPF msg=audit(1760169727.631:6346): prog-id=224 op=LOAD
type=BPF msg=audit(1760169727.631:6347): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169727.631:6348): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169727.632:6349): prog-id=225 op=LOAD
type=BPF msg=audit(1760169727.632:6350): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1760169727.653:6351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=nis-domainname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760169727.661:6352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=nis-domainname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760169727.756:6353): pid=37538 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169727.757:6354): pid=37538 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169727.761:6355): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169727.761:6356): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169727.885:6357): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169727.885:6358): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169727.950:6359): pid=37597 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169727.950:6360): pid=37597 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68787770756A7763676B6B7078646C61786A62656D6C786E6474726472736161203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169727.951:6361): pid=37597 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169727.955:6362): pid=37597 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169728.130:6363): pid=37597 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169728.130:6364): pid=37597 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169728.135:6365): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169728.135:6366): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169728.462:6367): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169728.462:6368): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169728.525:6369): pid=37613 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169728.525:6370): pid=37613 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706D776671717A6C6A6A75637A79767A636974746A69796F6D716B6665746268203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169728.526:6371): pid=37613 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169728.529:6372): pid=37613 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169729.085:6373): pid=37613 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169729.085:6374): pid=37613 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169729.089:6375): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169729.090:6376): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169729.411:6377): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169729.411:6378): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169729.475:6379): pid=37634 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169729.476:6380): pid=37634 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7673726F66726A717874707772717764726E79726B696179696F6C6C6F72616C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169729.476:6381): pid=37634 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169729.478:6382): pid=37634 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169730.020:6383): pid=37634 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169730.020:6384): pid=37634 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169730.024:6385): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169730.024:6386): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169730.322:6387): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169730.322:6388): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169730.386:6389): pid=37653 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169730.386:6390): pid=37653 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6479627774706267746C6F6E7775767465787065706478626379627964737065203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169730.387:6391): pid=37653 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169730.389:6392): pid=37653 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169730.560:6393): pid=37653 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169730.560:6394): pid=37653 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169730.563:6395): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169730.564:6396): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169730.671:6397): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169730.671:6398): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169730.730:6399): pid=37669 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169730.730:6400): pid=37669 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6375696666667A796366757472686D74666B6474656670626E717774636275203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169730.731:6401): pid=37669 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169730.733:6402): pid=37669 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169730.899:6403): pid=37669 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169730.900:6404): pid=37669 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169730.906:6405): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169730.906:6406): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169731.012:6407): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169731.012:6408): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169731.073:6409): pid=37685 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169731.074:6410): pid=37685 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63767A66696C69796B6B66616D6770646C6377796469706E786B6B6A78727A6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169731.074:6411): pid=37685 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169731.076:6412): pid=37685 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169731.245:6413): pid=37685 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169731.245:6414): pid=37685 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169731.249:6415): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169731.249:6416): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169731.440:6417): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169731.440:6418): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169731.500:6419): pid=37701 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169731.501:6420): pid=37701 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6866616864646E657078757A7665627A6B76796B736C7068656C7568766574203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169731.501:6421): pid=37701 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169731.504:6422): pid=37701 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1760169731.985:6423): prog-id=226 op=LOAD
type=BPF msg=audit(1760169731.985:6424): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169731.987:6425): prog-id=227 op=LOAD
type=BPF msg=audit(1760169731.987:6426): prog-id=228 op=LOAD
type=BPF msg=audit(1760169731.987:6427): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169731.987:6428): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169731.988:6429): prog-id=229 op=LOAD
type=BPF msg=audit(1760169731.988:6430): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169731.988:6431): prog-id=230 op=LOAD
type=BPF msg=audit(1760169731.988:6432): prog-id=231 op=LOAD
type=BPF msg=audit(1760169731.988:6433): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169731.988:6434): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169731.989:6435): prog-id=232 op=LOAD
type=BPF msg=audit(1760169731.989:6436): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169731.989:6437): prog-id=233 op=LOAD
type=BPF msg=audit(1760169731.989:6438): prog-id=234 op=LOAD
type=BPF msg=audit(1760169731.989:6439): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169731.989:6440): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169731.990:6441): prog-id=235 op=LOAD
type=BPF msg=audit(1760169731.990:6442): prog-id=236 op=LOAD
type=BPF msg=audit(1760169731.990:6443): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169731.990:6444): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169731.990:6445): prog-id=237 op=LOAD
type=BPF msg=audit(1760169731.990:6446): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1760169732.043:6447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=certmonger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760169732.065:6448): pid=37701 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169732.065:6449): pid=37701 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169732.070:6450): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169732.070:6451): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1760169742.252:6452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760169742.287:6453): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169742.287:6454): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1760169744.594:6455): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169744.594:6456): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169744.625:6457): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169744.625:6458): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169744.666:6459): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169744.666:6460): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169744.706:6461): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169744.706:6462): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169744.748:6463): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169744.748:6464): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169744.815:6465): pid=37821 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169744.816:6466): pid=37821 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7761717A646B6A6C707A7263736F70656669736269667665757973726B637661203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169744.817:6467): pid=37821 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169744.822:6468): pid=37821 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169744.957:6469): pid=37821 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169744.957:6470): pid=37821 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169744.962:6471): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169744.962:6472): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169745.004:6473): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169745.004:6474): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169745.042:6475): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169745.042:6476): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169745.082:6477): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169745.083:6478): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169745.116:6479): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169745.116:6480): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169745.158:6481): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169745.158:6482): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169745.225:6483): pid=37864 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169745.225:6484): pid=37864 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D757161656D6A78746F796A7370716363636577686E73656561646B6C646963203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169745.226:6485): pid=37864 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169745.228:6486): pid=37864 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169745.398:6487): pid=37864 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169745.398:6488): pid=37864 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169745.403:6489): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169745.403:6490): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169745.445:6491): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169745.445:6492): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169745.479:6493): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169745.479:6494): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169745.578:6495): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169745.578:6496): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169745.625:6497): pid=37894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169745.626:6498): pid=37894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7A6C65706462696C6666796A79667770646C6F6267676475616376686E6363203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169745.627:6499): pid=37894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169745.630:6500): pid=37894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169745.768:6501): pid=37894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169745.769:6502): pid=37894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169745.772:6503): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169745.772:6504): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169746.285:6505): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169746.286:6506): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169746.315:6507): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169746.316:6508): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169746.357:6509): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169746.357:6510): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169746.392:6511): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169746.393:6512): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169746.434:6513): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169746.434:6514): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169746.496:6515): pid=37944 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169746.496:6516): pid=37944 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7672686A6E69687A686871696879627077646F6E74666664697979696262676D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169746.497:6517): pid=37944 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169746.499:6518): pid=37944 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169746.633:6519): pid=37944 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169746.633:6520): pid=37944 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169746.638:6521): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169746.638:6522): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169746.679:6523): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169746.679:6524): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169746.713:6525): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169746.713:6526): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169746.754:6527): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169746.755:6528): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169746.786:6529): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169746.786:6530): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169746.827:6531): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169746.827:6532): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169746.889:6533): pid=37987 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169746.889:6534): pid=37987 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66776D756D616874696D6F71706C76696E7876746F6B61616A72777A73726565203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169746.890:6535): pid=37987 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169746.892:6536): pid=37987 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169747.068:6537): pid=37987 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169747.068:6538): pid=37987 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169747.072:6539): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169747.072:6540): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169747.114:6541): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169747.114:6542): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169747.140:6543): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169747.140:6544): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169747.355:6545): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169747.355:6546): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169747.420:6547): pid=38017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169747.421:6548): pid=38017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706B676575776F746A686678626972796265706C6D757269716376726C6C7763203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169747.421:6549): pid=38017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169747.425:6550): pid=38017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169747.613:6551): pid=38017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169747.613:6552): pid=38017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169747.617:6553): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169747.617:6554): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169748.019:6555): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169748.019:6556): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169748.052:6557): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169748.052:6558): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169748.094:6559): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169748.094:6560): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169748.132:6561): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169748.132:6562): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169748.173:6563): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169748.173:6564): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169748.229:6565): pid=38065 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169748.230:6566): pid=38065 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6979667A7577766A70756A71707A6874786A6A6969687867756C73657572686A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169748.230:6567): pid=38065 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169748.233:6568): pid=38065 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169748.369:6569): pid=38065 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169748.370:6570): pid=38065 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169748.374:6571): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169748.374:6572): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169748.418:6573): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169748.418:6574): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169748.455:6575): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169748.455:6576): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169748.497:6577): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169748.497:6578): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169748.529:6579): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169748.529:6580): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169748.573:6581): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169748.573:6582): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169748.636:6583): pid=38108 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169748.636:6584): pid=38108 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E67626477617361657370637670736C747178727968616F6470736F6D707766203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169748.637:6585): pid=38108 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169748.640:6586): pid=38108 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169748.820:6587): pid=38108 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169748.820:6588): pid=38108 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169748.824:6589): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169748.824:6590): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169748.865:6591): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169748.865:6592): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169748.896:6593): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169748.896:6594): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169749.403:6595): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169749.404:6596): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169749.465:6597): pid=38138 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169749.466:6598): pid=38138 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6577787A706A656D6E6A746D6E7976697568727A6D6B7A796D6D767A757A6862203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169749.466:6599): pid=38138 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169749.469:6600): pid=38138 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169749.618:6601): pid=38138 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169749.618:6602): pid=38138 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169749.623:6603): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169749.623:6604): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169751.526:6605): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169751.527:6606): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169751.579:6607): pid=38154 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169751.579:6608): pid=38154 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6F716973727070706E6E6F78796278796C77797A73637263627A7076776666203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169751.580:6609): pid=38154 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169751.582:6610): pid=38154 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169751.759:6611): pid=38154 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169751.759:6612): pid=38154 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169751.763:6613): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169751.763:6614): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169753.701:6615): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169753.701:6616): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169753.761:6617): pid=38171 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169753.761:6618): pid=38171 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69796F6F6F6F6964636163686C736F72697A7775796474756164716870667467203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169753.761:6619): pid=38171 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169753.764:6620): pid=38171 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169754.046:6621): pid=38171 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169754.046:6622): pid=38171 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169754.051:6623): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169754.052:6624): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169754.390:6625): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169754.390:6626): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169754.452:6627): pid=38191 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169754.452:6628): pid=38191 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66767874706D777A72716B7371646C726C786C76696D7277786666696D776768203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169754.453:6629): pid=38191 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169754.455:6630): pid=38191 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169757.196:6631): pid=38191 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169757.197:6632): pid=38191 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169757.200:6633): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169757.200:6634): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169757.368:6635): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169757.368:6636): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169757.430:6637): pid=38208 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169757.431:6638): pid=38208 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6275767A746877656F6B6E6E67667773777165726F7372726370646E677A6369203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169757.431:6639): pid=38208 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169757.434:6640): pid=38208 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169760.153:6641): pid=38208 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169760.154:6642): pid=38208 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169760.158:6643): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169760.158:6644): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169760.410:6645): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169760.410:6646): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169760.472:6647): pid=38225 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169760.472:6648): pid=38225 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77776178766A6B64766A6375616C6962776B6679696F6E726B65736874696768203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169760.472:6649): pid=38225 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169760.475:6650): pid=38225 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169760.651:6651): pid=38225 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169760.651:6652): pid=38225 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169760.654:6653): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169760.654:6654): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169760.844:6655): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169760.844:6656): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169760.896:6657): pid=38241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169760.896:6658): pid=38241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C776C767A6F766E767A7A7668696463746B677875797072716F716868627964203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169760.896:6659): pid=38241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169760.899:6660): pid=38241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169761.053:6661): pid=38241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169761.053:6662): pid=38241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169761.057:6663): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169761.057:6664): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169761.261:6665): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169761.261:6666): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169761.308:6667): pid=38257 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169761.308:6668): pid=38257 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7675707966646477776E7A726C6D6B6962766B6C7473776B797268656D776D71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169761.309:6669): pid=38257 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169761.310:6670): pid=38257 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1760169761.849:6671): prog-id=238 op=LOAD
type=BPF msg=audit(1760169761.849:6672): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169761.852:6673): prog-id=239 op=LOAD
type=BPF msg=audit(1760169761.852:6674): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169761.852:6675): prog-id=240 op=LOAD
type=BPF msg=audit(1760169761.852:6676): prog-id=241 op=LOAD
type=BPF msg=audit(1760169761.852:6677): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169761.852:6678): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169761.854:6679): prog-id=242 op=LOAD
type=BPF msg=audit(1760169761.854:6680): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169761.854:6681): prog-id=243 op=LOAD
type=BPF msg=audit(1760169761.854:6682): prog-id=244 op=LOAD
type=BPF msg=audit(1760169761.854:6683): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169761.854:6684): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169761.855:6685): prog-id=245 op=LOAD
type=BPF msg=audit(1760169761.855:6686): prog-id=246 op=LOAD
type=BPF msg=audit(1760169761.855:6687): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169761.855:6688): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169761.855:6689): prog-id=247 op=LOAD
type=BPF msg=audit(1760169761.855:6690): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1760169761.887:6691): pid=38257 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169761.888:6692): pid=38257 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169761.893:6693): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169761.893:6694): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169762.256:6695): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169762.256:6696): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169762.322:6697): pid=38313 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169762.322:6698): pid=38313 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626C6D77796661737A68757073796E756364706365767667797968797A647276203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169762.323:6699): pid=38313 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169762.327:6700): pid=38313 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169763.633:6701): pid=38313 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169763.633:6702): pid=38313 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169763.637:6703): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169763.637:6704): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169763.763:6705): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169763.763:6706): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169763.826:6707): pid=38359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169763.826:6708): pid=38359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686561777765756A73786D76766B78676B7270746A6D6B6B626762686565706A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169763.827:6709): pid=38359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169763.830:6710): pid=38359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1760169768.097:6711): prog-id=248 op=LOAD
type=BPF msg=audit(1760169768.097:6712): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169768.097:6713): prog-id=249 op=LOAD
type=BPF msg=audit(1760169768.097:6714): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169768.264:6715): prog-id=250 op=LOAD
type=BPF msg=audit(1760169768.264:6716): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169768.267:6717): prog-id=251 op=LOAD
type=BPF msg=audit(1760169768.267:6718): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169768.267:6719): prog-id=252 op=LOAD
type=BPF msg=audit(1760169768.267:6720): prog-id=253 op=LOAD
type=BPF msg=audit(1760169768.267:6721): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169768.267:6722): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169768.268:6723): prog-id=254 op=LOAD
type=BPF msg=audit(1760169768.268:6724): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169768.268:6725): prog-id=255 op=LOAD
type=BPF msg=audit(1760169768.268:6726): prog-id=256 op=LOAD
type=BPF msg=audit(1760169768.269:6727): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169768.269:6728): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169768.269:6729): prog-id=257 op=LOAD
type=BPF msg=audit(1760169768.269:6730): prog-id=258 op=LOAD
type=BPF msg=audit(1760169768.269:6731): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169768.269:6732): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169768.270:6733): prog-id=259 op=LOAD
type=BPF msg=audit(1760169768.270:6734): prog-id=0 op=UNLOAD
type=MAC_POLICY_LOAD msg=audit(1760169776.219:6735): auid=1002 ses=14 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1760169776.219:6735): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7fe2da200000 a2=36aa51 a3=0 items=0 ppid=38392 pid=38442 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169776.219:6735): proctitle="/usr/sbin/load_policy"
type=BPF msg=audit(1760169777.355:6736): prog-id=260 op=LOAD
type=BPF msg=audit(1760169777.355:6737): prog-id=261 op=LOAD
type=BPF msg=audit(1760169777.356:6738): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.356:6739): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.360:6740): prog-id=262 op=LOAD
type=BPF msg=audit(1760169777.361:6741): prog-id=263 op=LOAD
type=BPF msg=audit(1760169777.361:6742): prog-id=264 op=LOAD
type=BPF msg=audit(1760169777.362:6743): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.362:6744): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.362:6745): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.368:6746): prog-id=265 op=LOAD
type=BPF msg=audit(1760169777.368:6747): prog-id=266 op=LOAD
type=BPF msg=audit(1760169777.368:6748): prog-id=267 op=LOAD
type=BPF msg=audit(1760169777.369:6749): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.369:6750): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.369:6751): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1760169777.546:6752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r8575d505996b4cd48b0aec0737b6b9aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760169777.798:6753): prog-id=268 op=LOAD
type=BPF msg=audit(1760169777.798:6754): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.798:6755): prog-id=269 op=LOAD
type=BPF msg=audit(1760169777.798:6756): prog-id=270 op=LOAD
type=BPF msg=audit(1760169777.798:6757): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.798:6758): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.800:6759): prog-id=271 op=LOAD
type=BPF msg=audit(1760169777.800:6760): prog-id=272 op=LOAD
type=BPF msg=audit(1760169777.800:6761): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.800:6762): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.801:6763): prog-id=273 op=LOAD
type=BPF msg=audit(1760169777.801:6764): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.801:6765): prog-id=274 op=LOAD
type=BPF msg=audit(1760169777.801:6766): prog-id=275 op=LOAD
type=BPF msg=audit(1760169777.801:6767): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.801:6768): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.801:6769): prog-id=276 op=LOAD
type=BPF msg=audit(1760169777.801:6770): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.804:6771): prog-id=277 op=LOAD
type=BPF msg=audit(1760169777.804:6772): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1760169777.846:6773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r8cc8bd7bf3e148669a724da7691a74ba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760169777.876:6774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760169777.879:6775): prog-id=278 op=LOAD
type=BPF msg=audit(1760169777.879:6776): prog-id=279 op=LOAD
type=BPF msg=audit(1760169777.879:6777): prog-id=280 op=LOAD
type=SERVICE_STOP msg=audit(1760169777.882:6778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760169777.884:6779): prog-id=281 op=LOAD
type=BPF msg=audit(1760169777.884:6780): prog-id=282 op=LOAD
type=BPF msg=audit(1760169777.890:6781): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.890:6782): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.890:6783): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.905:6784): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169777.905:6785): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1760169777.906:6786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760169777.930:6787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1760169778.391:6788): prog-id=283 op=LOAD
type=BPF msg=audit(1760169778.391:6789): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169778.391:6790): prog-id=284 op=LOAD
type=BPF msg=audit(1760169778.391:6791): prog-id=285 op=LOAD
type=BPF msg=audit(1760169778.391:6792): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169778.391:6793): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169778.393:6794): prog-id=286 op=LOAD
type=BPF msg=audit(1760169778.393:6795): prog-id=287 op=LOAD
type=BPF msg=audit(1760169778.393:6796): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169778.393:6797): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169778.394:6798): prog-id=288 op=LOAD
type=BPF msg=audit(1760169778.394:6799): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169778.394:6800): prog-id=289 op=LOAD
type=BPF msg=audit(1760169778.394:6801): prog-id=290 op=LOAD
type=BPF msg=audit(1760169778.394:6802): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169778.394:6803): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169778.394:6804): prog-id=291 op=LOAD
type=BPF msg=audit(1760169778.395:6805): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169778.398:6806): prog-id=292 op=LOAD
type=BPF msg=audit(1760169778.398:6807): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1760169778.722:6808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760169778.722:6809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760169778.725:6810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r8575d505996b4cd48b0aec0737b6b9aa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760169778.730:6811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r8cc8bd7bf3e148669a724da7691a74ba comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1760169778.964:6812): pid=38361 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-rpm-macros-252-14.el9_2.8.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169778.964:6813): pid=38361 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-libs-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169778.964:6814): pid=38361 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-pam-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169778.964:6815): pid=38361 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169778.964:6816): pid=38361 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="systemd-container-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1760169778.964:6817): pid=38361 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-udev-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1760169779.834:6818): pid=38359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169779.835:6819): pid=38359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169779.838:6820): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169779.838:6821): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169780.087:6822): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169780.087:6823): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169780.147:6824): pid=39862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169780.148:6825): pid=39862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726F6A6E6570707A6F7678776F6E66626D706A62707A6E7576636A6C727A7366203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169780.148:6826): pid=39862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169780.152:6827): pid=39862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169780.333:6828): pid=39862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169780.333:6829): pid=39862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169780.336:6830): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169780.336:6831): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169780.554:6832): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169780.554:6833): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169780.610:6834): pid=39881 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169780.610:6835): pid=39881 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7379656A6F63766B6673716E66626878707A7668787473726E66756B62777478203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169780.611:6836): pid=39881 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169780.614:6837): pid=39881 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169780.807:6838): pid=39881 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169780.807:6839): pid=39881 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169780.809:6840): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169780.809:6841): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169781.384:6842): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169781.384:6843): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169781.441:6844): pid=39899 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169781.441:6845): pid=39899 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7064786D6A78707A6179777379686A6D76777369746A66796762766A69747075203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169781.442:6846): pid=39899 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169781.443:6847): pid=39899 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169781.622:6848): pid=39899 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169781.622:6849): pid=39899 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169781.627:6850): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169781.627:6851): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169781.730:6852): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169781.730:6853): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169781.793:6854): pid=39915 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169781.793:6855): pid=39915 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616B6F696762676475766D6B7773777265627662747973696964696B76686274203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169781.794:6856): pid=39915 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169781.796:6857): pid=39915 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169781.969:6858): pid=39915 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169781.970:6859): pid=39915 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169781.974:6860): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169781.974:6861): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169782.052:6862): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169782.052:6863): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169782.100:6864): pid=39931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169782.100:6865): pid=39931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686774777575786C656A696970736E716D706167626D6F7775726E6373767664203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169782.100:6866): pid=39931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169782.102:6867): pid=39931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169782.277:6868): pid=39931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169782.277:6869): pid=39931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169782.281:6870): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169782.281:6871): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169782.683:6872): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169782.683:6873): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169782.747:6874): pid=39947 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169782.747:6875): pid=39947 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786A61726A69736D67757761686F6A737666646B66796E727464646879696B69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169782.748:6876): pid=39947 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169782.750:6877): pid=39947 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169783.036:6878): pid=39947 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169783.036:6879): pid=39947 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169783.039:6880): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169783.039:6881): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169783.329:6882): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169783.329:6883): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169783.394:6884): pid=39967 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169783.394:6885): pid=39967 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706862666972756B747762777770706D7A646B6E7A706D72787167636D617567203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169783.394:6886): pid=39967 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169783.397:6887): pid=39967 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169786.175:6888): pid=39967 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169786.175:6889): pid=39967 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169786.180:6890): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169786.180:6891): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169786.323:6892): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169786.323:6893): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169786.383:6894): pid=39984 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169786.384:6895): pid=39984 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73656C676B6979647979716A7574766D767A6471797A6A776767616B7364676A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169786.384:6896): pid=39984 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169786.386:6897): pid=39984 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169789.108:6898): pid=39984 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169789.108:6899): pid=39984 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169789.114:6900): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169789.115:6901): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169789.317:6902): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169789.317:6903): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169789.377:6904): pid=40001 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169789.378:6905): pid=40001 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75716771726C686E6277757378626774717773706368646175776A626B7A737A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169789.378:6906): pid=40001 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169789.381:6907): pid=40001 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169789.562:6908): pid=40001 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169789.562:6909): pid=40001 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169789.566:6910): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169789.566:6911): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169789.762:6912): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169789.762:6913): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169789.829:6914): pid=40017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169789.830:6915): pid=40017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716D667471677668626F6C796B647461767169796664787A6865727364677272203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169789.831:6916): pid=40017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169789.833:6917): pid=40017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169790.003:6918): pid=40017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169790.003:6919): pid=40017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169790.008:6920): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169790.008:6921): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169790.135:6922): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169790.135:6923): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169790.199:6924): pid=40033 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169790.200:6925): pid=40033 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6365736972666A676675636778776B6F61627876636C656B66616D756C6B6E67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169790.200:6926): pid=40033 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169790.203:6927): pid=40033 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169790.511:6928): pid=40033 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169790.512:6929): pid=40033 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169790.516:6930): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169790.516:6931): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169790.898:6932): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169790.898:6933): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169790.959:6934): pid=40051 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169790.960:6935): pid=40051 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637166757A70796C616C6F6A75646264677A64706167686E6779736362756678203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169790.960:6936): pid=40051 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169790.963:6937): pid=40051 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169792.398:6938): pid=40051 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169792.399:6939): pid=40051 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169792.404:6940): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169792.404:6941): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169792.686:6942): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169792.686:6943): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169792.748:6944): pid=40101 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169792.748:6945): pid=40101 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7872666C656B6D746F6E6474697175737077617A676C67617061667578617764203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169792.749:6946): pid=40101 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169792.753:6947): pid=40101 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169794.269:6948): pid=40101 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169794.269:6949): pid=40101 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169794.273:6950): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169794.273:6951): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169794.562:6952): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169794.562:6953): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169794.620:6954): pid=40149 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169794.620:6955): pid=40149 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6175686967707A696669696173776F69746D71756C7271737178727A6E646961203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169794.621:6956): pid=40149 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169794.624:6957): pid=40149 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169795.694:6958): pid=40149 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169795.695:6959): pid=40149 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169795.699:6960): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169795.699:6961): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169796.061:6962): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169796.061:6963): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169796.128:6964): pid=40190 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169796.128:6965): pid=40190 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A79736D7468797264656D6A737474737768717A6F786C6B64797A616A6F7A6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169796.129:6966): pid=40190 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169796.131:6967): pid=40190 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169797.217:6968): pid=40190 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169797.217:6969): pid=40190 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169797.221:6970): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169797.221:6971): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169797.796:6972): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169797.796:6973): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169797.861:6974): pid=40228 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169797.861:6975): pid=40228 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716577796865616777686369767174736266786D6474757362686A7678686971203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169797.862:6976): pid=40228 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169797.864:6977): pid=40228 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169806.832:6978): pid=40228 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169806.832:6979): pid=40228 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169806.836:6980): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169806.836:6981): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169806.943:6982): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169806.944:6983): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169807.007:6984): pid=40390 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169807.007:6985): pid=40390 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7070706D666B75677964677768666A6E656E6C726A6D68627A7976676B6A6F61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169807.008:6986): pid=40390 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169807.011:6987): pid=40390 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169816.072:6988): pid=40390 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169816.072:6989): pid=40390 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169816.077:6990): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169816.077:6991): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169816.174:6992): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169816.174:6993): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169816.233:6994): pid=40563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169816.233:6995): pid=40563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70687A636173646669726F7A66676371617264656776766366786B626C71646A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169816.234:6996): pid=40563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169816.236:6997): pid=40563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169838.209:6998): pid=40563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169838.209:6999): pid=40563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169838.215:7000): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169838.215:7001): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169838.314:7002): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169838.314:7003): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169838.379:7004): pid=40997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169838.380:7005): pid=40997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626364676E77627464656C646E69666E696776787164726564766B7361756F6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169838.380:7006): pid=40997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169838.383:7007): pid=40997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169851.667:7008): pid=40997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169851.668:7009): pid=40997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169851.674:7010): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169851.674:7011): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169851.760:7012): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169851.760:7013): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169851.827:7014): pid=41215 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169851.827:7015): pid=41215 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706D736763696D736B716D71727169676F6F6D7968706B6C766E776D77617366203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169851.828:7016): pid=41215 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169851.831:7017): pid=41215 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169860.460:7018): pid=41215 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169860.460:7019): pid=41215 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169860.465:7020): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169860.465:7021): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169860.553:7022): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169860.553:7023): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169860.620:7024): pid=41362 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169860.620:7025): pid=41362 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76676B63746369716C6971757372776A6C646F706A6F6D6B79736A6779747672203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169860.621:7026): pid=41362 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169860.624:7027): pid=41362 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169866.354:7028): pid=41362 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169866.355:7029): pid=41362 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169866.359:7030): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169866.359:7031): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169866.440:7032): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169866.440:7033): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169866.496:7034): pid=41500 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169866.497:7035): pid=41500 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647A70627675646774637A6A6D6F706A61706562757978667070676F71747076203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169866.497:7036): pid=41500 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169866.499:7037): pid=41500 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169869.353:7038): pid=41500 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169869.353:7039): pid=41500 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169869.357:7040): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169869.357:7041): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169869.438:7042): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169869.438:7043): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169869.502:7044): pid=41636 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169869.503:7045): pid=41636 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65676D6A65717864636266716D6870746E7164686869726D7A616E7161696F65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169869.503:7046): pid=41636 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169869.505:7047): pid=41636 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169872.641:7048): pid=41636 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169872.641:7049): pid=41636 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169872.645:7050): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169872.645:7051): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169872.734:7052): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169872.734:7053): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169872.793:7054): pid=41770 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169872.794:7055): pid=41770 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7076627178786C7173667478746370776E726D736374737072756F696F6F6275203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169872.794:7056): pid=41770 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169872.797:7057): pid=41770 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169875.854:7058): pid=41770 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169875.855:7059): pid=41770 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169875.859:7060): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169875.859:7061): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169875.939:7062): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169875.939:7063): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169876.000:7064): pid=41905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169876.001:7065): pid=41905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62727A616D726761766675716666796D6276776B687671777469616978626A64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169876.001:7066): pid=41905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169876.004:7067): pid=41905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169880.364:7068): pid=41905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169880.365:7069): pid=41905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169880.370:7070): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169880.370:7071): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169880.444:7072): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169880.444:7073): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169880.493:7074): pid=42052 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169880.493:7075): pid=42052 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6D6A686D77746E726872696F646B7A6B61676664696E6C72646C766679736F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169880.493:7076): pid=42052 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169880.495:7077): pid=42052 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169883.244:7078): pid=42052 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169883.245:7079): pid=42052 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169883.249:7080): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169883.249:7081): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169883.796:7082): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169883.796:7083): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169883.856:7084): pid=42187 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169883.856:7085): pid=42187 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746264776D7664626279726A796761786A77716A63656C61796C716169696665203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169883.856:7086): pid=42187 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169883.858:7087): pid=42187 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169884.149:7088): pid=42187 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169884.149:7089): pid=42187 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169884.152:7090): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169884.152:7091): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169884.377:7092): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169884.377:7093): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169884.436:7094): pid=42207 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169884.436:7095): pid=42207 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A687A76666565716C6A7074796761766D65726C61786E6474747A6362666268203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169884.437:7096): pid=42207 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169884.439:7097): pid=42207 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169887.331:7098): pid=42207 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169887.331:7099): pid=42207 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169887.336:7100): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169887.336:7101): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169887.494:7102): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169887.494:7103): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169887.559:7104): pid=42224 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169887.560:7105): pid=42224 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F676C727472776564786D62626C746D6469697A6C6B63746E6F6C6E726E7467203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169887.561:7106): pid=42224 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169887.564:7107): pid=42224 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169890.298:7108): pid=42224 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169890.299:7109): pid=42224 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169890.302:7110): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169890.302:7111): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169890.486:7112): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169890.486:7113): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169890.545:7114): pid=42241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169890.546:7115): pid=42241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71736C62747067656D777961676278786C6B626A797577796164666E66696D76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169890.546:7116): pid=42241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169890.548:7117): pid=42241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169890.719:7118): pid=42241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169890.720:7119): pid=42241 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169890.724:7120): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169890.724:7121): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169890.890:7122): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169890.890:7123): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169890.937:7124): pid=42257 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169890.937:7125): pid=42257 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6D7167746B76786574647A6D7577796279736D63626B62727661686364796D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169890.938:7126): pid=42257 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169890.940:7127): pid=42257 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169891.093:7128): pid=42257 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169891.094:7129): pid=42257 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169891.098:7130): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169891.098:7131): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169891.245:7132): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169891.245:7133): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169891.293:7134): pid=42273 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169891.293:7135): pid=42273 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616D6178696763776D696F62786A7763766F726F6C75736F72786468687A6764203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169891.294:7136): pid=42273 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169891.296:7137): pid=42273 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169891.559:7138): pid=42273 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169891.559:7139): pid=42273 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169891.562:7140): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169891.563:7141): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169892.038:7142): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169892.039:7143): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169892.104:7144): pid=42291 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169892.104:7145): pid=42291 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6D7267726D777161616E6D65756A767064616F6E70777662706D6164707A6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169892.105:7146): pid=42291 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169892.107:7147): pid=42291 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169893.337:7148): pid=42291 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169893.337:7149): pid=42291 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169893.341:7150): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169893.341:7151): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169893.721:7152): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169893.721:7153): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169893.788:7154): pid=42323 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169893.788:7155): pid=42323 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667665637A7376726570707463766D7078666E7073666C7266636B696671696D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169893.789:7156): pid=42323 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169893.791:7157): pid=42323 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169894.092:7158): pid=42323 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169894.092:7159): pid=42323 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169894.096:7160): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169894.096:7161): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169894.507:7162): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169894.508:7163): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169894.574:7164): pid=42343 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169894.574:7165): pid=42343 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776D67746178777962626C787A6F70777473636E61646C78636A697666797368203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169894.574:7166): pid=42343 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169894.577:7167): pid=42343 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169897.385:7168): pid=42343 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169897.385:7169): pid=42343 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169897.390:7170): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169897.390:7171): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169897.537:7172): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169897.537:7173): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169897.598:7174): pid=42360 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169897.599:7175): pid=42360 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A686A616767627A76787666626972697867637271717663797069777177646C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169897.599:7176): pid=42360 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169897.601:7177): pid=42360 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169900.441:7178): pid=42360 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169900.441:7179): pid=42360 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169900.445:7180): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169900.445:7181): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169900.638:7182): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169900.639:7183): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169900.708:7184): pid=42377 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169900.708:7185): pid=42377 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62646F6276676569776B716F616F77726B77747861726B677262697464726577203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169900.709:7186): pid=42377 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169900.712:7187): pid=42377 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169900.892:7188): pid=42377 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169900.892:7189): pid=42377 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169900.896:7190): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169900.896:7191): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169901.100:7192): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169901.101:7193): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169901.156:7194): pid=42393 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169901.156:7195): pid=42393 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79737077727A7A70756177766176717969766A7874736C6163776F617070687A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169901.157:7196): pid=42393 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169901.159:7197): pid=42393 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169901.316:7198): pid=42393 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169901.316:7199): pid=42393 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169901.321:7200): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169901.321:7201): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169901.479:7202): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169901.479:7203): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169901.540:7204): pid=42409 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169901.540:7205): pid=42409 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77796576616261716879677872697474696676666572707964777670616F6873203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169901.541:7206): pid=42409 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169901.543:7207): pid=42409 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169901.854:7208): pid=42409 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169901.854:7209): pid=42409 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169901.858:7210): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169901.858:7211): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169902.305:7212): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169902.305:7213): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169902.367:7214): pid=42427 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169902.367:7215): pid=42427 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B78676F73626761646279676468657967667071796B6B7262666873726F7072203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169902.368:7216): pid=42427 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169902.370:7217): pid=42427 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169903.598:7218): pid=42427 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169903.598:7219): pid=42427 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169903.603:7220): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169903.603:7221): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169903.748:7222): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169903.748:7223): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169903.805:7224): pid=42459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169903.805:7225): pid=42459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73626871656A6B7872627A716468746C6B7263687278646764797861756B6770203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169903.806:7226): pid=42459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169903.808:7227): pid=42459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169903.956:7228): pid=42459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169903.956:7229): pid=42459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169903.960:7230): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169903.960:7231): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169904.259:7232): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169904.260:7233): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169904.290:7234): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169904.290:7235): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169904.330:7236): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169904.330:7237): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169904.366:7238): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169904.366:7239): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169904.408:7240): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169904.408:7241): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169904.460:7242): pid=42509 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169904.460:7243): pid=42509 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6771796D71647565696168706C7277756C6A616B6E6274666669696C716C7664203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169904.461:7244): pid=42509 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169904.463:7245): pid=42509 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169904.625:7246): pid=42509 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169904.625:7247): pid=42509 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169904.631:7248): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169904.631:7249): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169904.674:7250): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169904.674:7251): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169904.720:7252): pid=42527 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169904.720:7253): pid=42527 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C65656663756A6D766376796367687867677479796161696966697975626976203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169904.720:7254): pid=42527 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169904.722:7255): pid=42527 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169904.875:7256): pid=42527 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169904.876:7257): pid=42527 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169904.879:7258): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169904.879:7259): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169904.920:7260): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169904.921:7261): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169904.953:7262): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169904.953:7263): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169905.086:7264): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169905.086:7265): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169905.116:7266): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169905.117:7267): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169905.157:7268): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169905.158:7269): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169905.192:7270): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169905.192:7271): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169905.235:7272): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169905.235:7273): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169905.270:7274): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169905.270:7275): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169905.425:7276): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169905.425:7277): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169905.466:7278): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169905.466:7279): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169905.508:7280): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169905.508:7281): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169905.538:7282): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169905.538:7283): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169905.582:7284): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169905.582:7285): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169905.650:7286): pid=42631 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169905.650:7287): pid=42631 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169905.651:7288): pid=42631 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169905.656:7289): pid=42631 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169905.847:7290): pid=42631 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169905.848:7291): pid=42631 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169905.852:7292): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169905.853:7293): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169906.185:7294): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169906.185:7295): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169906.242:7296): pid=42655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169906.242:7297): pid=42655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706D6B7277737A63626A647777687463677670696165776462697861636C7965203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169906.243:7298): pid=42655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169906.245:7299): pid=42655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169906.395:7300): pid=42655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169906.396:7301): pid=42655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169906.400:7302): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169906.400:7303): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169916.475:7304): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169916.475:7305): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169916.539:7306): pid=42787 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169916.540:7307): pid=42787 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666571686C6C786E6F7A687675796C6267767063736B6F737468787369716971203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169916.540:7308): pid=42787 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169916.544:7309): pid=42787 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169916.714:7310): pid=42787 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169916.714:7311): pid=42787 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169916.718:7312): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169916.718:7313): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169917.303:7314): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169917.303:7315): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169917.366:7316): pid=42803 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169917.366:7317): pid=42803 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F62676D79796C7262756E6F6776787279717678676E74676466637279677161203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169917.367:7318): pid=42803 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169917.369:7319): pid=42803 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169917.549:7320): pid=42803 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169917.550:7321): pid=42803 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169917.554:7322): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169917.554:7323): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169917.641:7324): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169917.641:7325): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169917.693:7326): pid=42819 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169917.693:7327): pid=42819 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6E6862767161757863657967617079706A71786677706878726C6469626B79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169917.694:7328): pid=42819 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169917.695:7329): pid=42819 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169917.842:7330): pid=42819 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169917.842:7331): pid=42819 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169917.846:7332): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169917.847:7333): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169918.045:7334): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169918.045:7335): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169918.100:7336): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169918.101:7337): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169918.142:7338): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169918.142:7339): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169918.176:7340): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169918.177:7341): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169918.218:7342): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169918.218:7343): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169918.280:7344): pid=42867 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169918.280:7345): pid=42867 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B69646376647364646C6C6C73696E6272766868756D7171616E6A6F767A786A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169918.281:7346): pid=42867 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169918.283:7347): pid=42867 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169918.452:7348): pid=42867 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169918.452:7349): pid=42867 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169918.456:7350): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169918.456:7351): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169918.498:7352): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169918.498:7353): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169918.530:7354): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169918.530:7355): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169918.570:7356): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169918.570:7357): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169918.599:7358): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169918.599:7359): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169918.640:7360): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169918.640:7361): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169918.698:7362): pid=42910 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169918.698:7363): pid=42910 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A646C69756679646675676B6775766968746C656F796F727A716E716D696375203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169918.699:7364): pid=42910 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169918.701:7365): pid=42910 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169918.885:7366): pid=42910 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169918.885:7367): pid=42910 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169918.889:7368): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169918.890:7369): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169918.930:7370): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169918.930:7371): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169918.962:7372): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169918.963:7373): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169919.067:7374): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169919.067:7375): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169919.130:7376): pid=42940 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169919.130:7377): pid=42940 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6478776370696E7A73676275736F6579736E646E6B7A73616C637473676C77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169919.131:7378): pid=42940 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169919.133:7379): pid=42940 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169919.325:7380): pid=42940 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169919.326:7381): pid=42940 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169919.329:7382): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169919.330:7383): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169919.469:7384): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169919.470:7385): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169919.530:7386): pid=42956 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169919.530:7387): pid=42956 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7972706A6E747477756E797A786872656A62726B6E796A617369667669786A70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169919.531:7388): pid=42956 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169919.533:7389): pid=42956 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169920.066:7390): pid=42956 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169920.067:7391): pid=42956 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169920.071:7392): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169920.072:7393): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169920.441:7394): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169920.441:7395): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169920.511:7396): pid=43043 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169920.511:7397): pid=43043 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796C7463656364647879726C6D63736B796F6573677573626B74786B706A6E77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169920.512:7398): pid=43043 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169920.514:7399): pid=43043 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169920.742:7400): pid=43043 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169920.743:7401): pid=43043 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169920.747:7402): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169920.747:7403): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169921.052:7404): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169921.052:7405): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169921.107:7406): pid=43062 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169921.108:7407): pid=43062 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6571796B6E64796F746D737A6D6B706D6366746F786B6A737A6D756E62657073203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169921.108:7408): pid=43062 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169921.111:7409): pid=43062 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169921.263:7410): pid=43062 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169921.263:7411): pid=43062 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169921.267:7412): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169921.267:7413): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169921.422:7414): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169921.422:7415): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169921.485:7416): pid=43078 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169921.485:7417): pid=43078 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67737667757377666F6F776A6E69626567626C70757A7863686C627962687364203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169921.485:7418): pid=43078 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169921.488:7419): pid=43078 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169921.677:7420): pid=43078 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169921.677:7421): pid=43078 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169921.681:7422): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169921.681:7423): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169922.012:7424): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169922.012:7425): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169922.065:7426): pid=43094 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169922.066:7427): pid=43094 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71776C72706A7062746279636B747061706F6B776E726D61746A7275756C636F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169922.067:7428): pid=43094 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169922.069:7429): pid=43094 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169922.250:7430): pid=43094 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169922.250:7431): pid=43094 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169922.254:7432): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169922.254:7433): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169922.595:7434): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169922.595:7435): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169922.658:7436): pid=43110 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169922.658:7437): pid=43110 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777179797878726D767678686F6668717467706371786B62746463726A6F656B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169922.659:7438): pid=43110 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169922.661:7439): pid=43110 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169922.858:7440): pid=43110 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169922.858:7441): pid=43110 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169922.863:7442): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169922.863:7443): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169923.537:7444): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169923.538:7445): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169923.604:7446): pid=43126 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169923.604:7447): pid=43126 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6573637066676472777272696369766A786C6373666D62777874626971786773203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169923.605:7448): pid=43126 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169923.608:7449): pid=43126 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169923.876:7450): pid=43126 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169923.876:7451): pid=43126 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169923.881:7452): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169923.881:7453): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169924.381:7454): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169924.381:7455): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169924.443:7456): pid=43153 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169924.443:7457): pid=43153 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756365697566686969727671696F65746B617362716F657A69656B7A75646D76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169924.444:7458): pid=43153 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169924.447:7459): pid=43153 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1760169925.005:7460): prog-id=293 op=LOAD
type=SYSCALL msg=audit(1760169925.005:7460): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffaa7dcfe0 a2=90 a3=9500000000 items=0 ppid=43401 pid=43402 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169925.005:7460): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393566373636656563336361653165376139323666653731313864643931
type=BPF msg=audit(1760169925.015:7461): prog-id=294 op=LOAD
type=SYSCALL msg=audit(1760169925.015:7461): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffea772fb40 a2=90 a3=9500000000 items=0 ppid=43406 pid=43407 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169925.015:7461): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623738313839393565653032323530353531326235613233333130656664
type=BPF msg=audit(1760169925.068:7462): prog-id=295 op=LOAD
type=SYSCALL msg=audit(1760169925.068:7462): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff75325fb0 a2=90 a3=9500000000 items=0 ppid=43421 pid=43422 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169925.068:7462): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303836326666653239313963386131386335383036626162656261333962
type=BPF msg=audit(1760169925.071:7463): prog-id=296 op=LOAD
type=SYSCALL msg=audit(1760169925.071:7463): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc94cb4300 a2=90 a3=9500000000 items=0 ppid=43418 pid=43419 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169925.071:7463): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616264306465386665396132646666366165613861386133636138333439
type=BPF msg=audit(1760169925.145:7464): prog-id=297 op=LOAD
type=SYSCALL msg=audit(1760169925.145:7464): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe13807660 a2=90 a3=9500000000 items=0 ppid=43451 pid=43452 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169925.145:7464): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653964663463333338303866383138653065656561623464353734303562
type=BPF msg=audit(1760169927.483:7465): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169927.533:7466): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169928.073:7467): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169928.205:7468): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169928.666:7469): prog-id=298 op=LOAD
type=SYSCALL msg=audit(1760169928.666:7469): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe82b4bdb0 a2=90 a3=9500000000 items=0 ppid=44629 pid=44630 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169928.666:7469): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383632373532623264373031663536653833323364656432396562336633
type=BPF msg=audit(1760169928.670:7470): prog-id=299 op=LOAD
type=SYSCALL msg=audit(1760169928.670:7470): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff46dac850 a2=90 a3=9500000000 items=0 ppid=44635 pid=44636 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169928.670:7470): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343465386132323230396330623061303338626439653264356435303535
type=BPF msg=audit(1760169928.905:7471): prog-id=300 op=LOAD
type=SYSCALL msg=audit(1760169928.905:7471): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff327d5060 a2=90 a3=9500000000 items=0 ppid=44695 pid=44696 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169928.905:7471): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303465346132366332346666633139613464633430316535643261643366
type=BPF msg=audit(1760169930.986:7472): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169931.740:7473): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169932.298:7474): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169933.047:7475): prog-id=301 op=LOAD
type=SYSCALL msg=audit(1760169933.047:7475): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe99677870 a2=90 a3=9500000000 items=0 ppid=45312 pid=45313 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169933.047:7475): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393630306539653865333032363662643539643566623339343466323434
type=BPF msg=audit(1760169933.853:7476): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169936.672:7477): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1760169936.986:7478): pid=43153 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169936.987:7479): pid=43153 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169936.991:7480): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169936.991:7481): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169937.714:7482): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169937.714:7483): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169937.779:7484): pid=45561 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169937.780:7485): pid=45561 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D707463717A676272616761786E647269667A6D72626F75667765676865696D73203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169937.780:7486): pid=45561 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169937.784:7487): pid=45561 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169937.959:7488): pid=45561 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169937.959:7489): pid=45561 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169937.964:7490): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169937.964:7491): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169938.087:7492): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169938.087:7493): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169938.148:7494): pid=45577 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169938.149:7495): pid=45577 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776D6978706C7767646169676C717862767471756B727974677065756F736C73203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169938.149:7496): pid=45577 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169938.152:7497): pid=45577 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169938.336:7498): pid=45577 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169938.336:7499): pid=45577 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169938.339:7500): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169938.339:7501): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169938.576:7502): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169938.576:7503): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169938.627:7504): pid=45593 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169938.628:7505): pid=45593 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E726F6168786A696862637A7A64706B65716D756B68747A716772726B696263203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169938.628:7506): pid=45593 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169938.631:7507): pid=45593 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169938.787:7508): pid=45593 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169938.788:7509): pid=45593 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169938.792:7510): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169938.792:7511): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169938.968:7512): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169938.968:7513): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169938.999:7514): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169938.999:7515): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169939.041:7516): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169939.041:7517): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169939.079:7518): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169939.079:7519): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169939.121:7520): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169939.121:7521): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169939.183:7522): pid=45643 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169939.184:7523): pid=45643 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7867637869616C76736F7A777A6471776C776678796C6F7969616663626F6262203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169939.184:7524): pid=45643 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169939.187:7525): pid=45643 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169939.352:7526): pid=45643 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169939.352:7527): pid=45643 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169939.356:7528): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169939.356:7529): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169939.404:7530): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169939.404:7531): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169939.444:7532): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169939.444:7533): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169939.485:7534): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169939.486:7535): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169939.519:7536): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169939.519:7537): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169939.561:7538): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169939.561:7539): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169939.623:7540): pid=45686 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169939.624:7541): pid=45686 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6A796A786F71716963666F70687167766B6C7575746C6B7A63756B646B7272203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169939.624:7542): pid=45686 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169939.626:7543): pid=45686 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169939.798:7544): pid=45686 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169939.798:7545): pid=45686 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169939.802:7546): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169939.802:7547): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169939.844:7548): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169939.844:7549): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169939.875:7550): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169939.875:7551): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169939.946:7552): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169939.946:7553): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169939.977:7554): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169939.977:7555): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169940.018:7556): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169940.018:7557): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169940.054:7558): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169940.054:7559): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169940.095:7560): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169940.096:7561): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169940.156:7562): pid=45748 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169940.156:7563): pid=45748 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78726A706473726B7664787A797067616E7566756B6C786A6C617179656B6766203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169940.157:7564): pid=45748 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169940.159:7565): pid=45748 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169940.330:7566): pid=45748 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169940.330:7567): pid=45748 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169940.334:7568): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169940.334:7569): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169940.375:7570): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169940.376:7571): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169940.411:7572): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169940.411:7573): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169940.453:7574): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169940.453:7575): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169940.485:7576): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169940.485:7577): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169940.526:7578): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169940.526:7579): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169940.619:7580): pid=45791 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169940.619:7581): pid=45791 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D79726E647169676A7A736C6E6E706D71756A6F6C69766B6A6463776D6B6474203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169940.620:7582): pid=45791 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169940.622:7583): pid=45791 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169940.811:7584): pid=45791 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169940.812:7585): pid=45791 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169940.816:7586): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169940.816:7587): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169940.857:7588): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169940.857:7589): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169940.890:7590): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169940.891:7591): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169941.038:7592): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169941.038:7593): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169941.070:7594): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169941.071:7595): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169941.114:7596): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169941.114:7597): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169941.150:7598): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169941.150:7599): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169941.191:7600): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169941.191:7601): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169941.248:7602): pid=45853 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169941.248:7603): pid=45853 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C736C767974616F706A68776E6177677773646C6D796B706B6D717461766D6B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169941.248:7604): pid=45853 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169941.250:7605): pid=45853 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169941.427:7606): pid=45853 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169941.427:7607): pid=45853 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169941.431:7608): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169941.431:7609): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169941.472:7610): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169941.472:7611): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169941.507:7612): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169941.507:7613): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169941.547:7614): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169941.547:7615): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169941.575:7616): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169941.575:7617): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169941.616:7618): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169941.616:7619): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169941.673:7620): pid=45896 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169941.673:7621): pid=45896 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78697865626362786764766C7A676F6D6A71776F717078616663696A736F6D69203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169941.674:7622): pid=45896 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169941.677:7623): pid=45896 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169941.816:7624): pid=45896 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169941.816:7625): pid=45896 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169941.820:7626): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169941.820:7627): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169941.861:7628): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169941.862:7629): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169941.894:7630): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169941.894:7631): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169942.019:7632): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169942.019:7633): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169942.049:7634): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169942.049:7635): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169942.089:7636): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169942.089:7637): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169942.126:7638): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169942.126:7639): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169942.167:7640): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169942.167:7641): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169942.230:7642): pid=45958 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169942.230:7643): pid=45958 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78756362687A666663756C74616D756A6C63636E7578637979696C6D76696A73203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169942.232:7644): pid=45958 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169942.234:7645): pid=45958 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169942.409:7646): pid=45958 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169942.409:7647): pid=45958 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169942.414:7648): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169942.414:7649): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169942.455:7650): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169942.455:7651): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169942.490:7652): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169942.491:7653): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169942.531:7654): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169942.531:7655): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169942.563:7656): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169942.563:7657): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169942.603:7658): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169942.603:7659): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169942.664:7660): pid=46001 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169942.664:7661): pid=46001 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68737A6175716F6E616D77697468766F676D6E787A696563636E726F71637A64203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169942.664:7662): pid=46001 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169942.667:7663): pid=46001 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169942.856:7664): pid=46001 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169942.857:7665): pid=46001 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169942.860:7666): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169942.861:7667): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169942.901:7668): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169942.902:7669): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169942.932:7670): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169942.932:7671): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169943.068:7672): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169943.068:7673): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169943.128:7674): pid=46031 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169943.129:7675): pid=46031 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61636F6F6A786A6B796463647262687869696E6678706F68776C6F71766B6573203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169943.129:7676): pid=46031 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169943.132:7677): pid=46031 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1760169943.629:7678): prog-id=302 op=LOAD
type=BPF msg=audit(1760169943.629:7679): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169943.629:7680): prog-id=303 op=LOAD
type=BPF msg=audit(1760169943.629:7681): prog-id=304 op=LOAD
type=BPF msg=audit(1760169943.629:7682): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169943.629:7683): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169943.631:7684): prog-id=305 op=LOAD
type=BPF msg=audit(1760169943.631:7685): prog-id=306 op=LOAD
type=BPF msg=audit(1760169943.631:7686): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169943.631:7687): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169943.631:7688): prog-id=307 op=LOAD
type=BPF msg=audit(1760169943.631:7689): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169943.632:7690): prog-id=308 op=LOAD
type=BPF msg=audit(1760169943.632:7691): prog-id=309 op=LOAD
type=BPF msg=audit(1760169943.632:7692): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169943.632:7693): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169943.632:7694): prog-id=310 op=LOAD
type=BPF msg=audit(1760169943.632:7695): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169943.635:7696): prog-id=311 op=LOAD
type=BPF msg=audit(1760169943.635:7697): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169943.862:7698): prog-id=312 op=LOAD
type=BPF msg=audit(1760169943.862:7699): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169943.862:7700): prog-id=313 op=LOAD
type=BPF msg=audit(1760169943.862:7701): prog-id=314 op=LOAD
type=BPF msg=audit(1760169943.862:7702): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169943.862:7703): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169943.864:7704): prog-id=315 op=LOAD
type=BPF msg=audit(1760169943.864:7705): prog-id=316 op=LOAD
type=BPF msg=audit(1760169943.864:7706): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169943.864:7707): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169943.864:7708): prog-id=317 op=LOAD
type=BPF msg=audit(1760169943.864:7709): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169943.864:7710): prog-id=318 op=LOAD
type=BPF msg=audit(1760169943.864:7711): prog-id=319 op=LOAD
type=BPF msg=audit(1760169943.864:7712): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169943.864:7713): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169943.865:7714): prog-id=320 op=LOAD
type=BPF msg=audit(1760169943.865:7715): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169943.868:7716): prog-id=321 op=LOAD
type=BPF msg=audit(1760169943.868:7717): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1760169943.891:7718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo-container-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760169943.925:7719): pid=46031 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169943.926:7720): pid=46031 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169943.930:7721): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169943.930:7722): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169944.082:7723): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169944.082:7724): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169944.114:7725): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169944.114:7726): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169944.155:7727): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169944.156:7728): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169944.191:7729): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169944.192:7730): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169944.234:7731): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169944.235:7732): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169944.297:7733): pid=46155 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169944.297:7734): pid=46155 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D736B7071627766697868776F69736B626777676D6F776A6273676E71656D74203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169944.298:7735): pid=46155 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169944.303:7736): pid=46155 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169944.457:7737): pid=46155 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169944.458:7738): pid=46155 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169944.461:7739): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169944.461:7740): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169944.505:7741): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169944.505:7742): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169944.540:7743): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169944.540:7744): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169944.580:7745): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169944.581:7746): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169944.610:7747): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169944.610:7748): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169944.651:7749): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169944.652:7750): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169944.712:7751): pid=46198 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169944.713:7752): pid=46198 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71777872747072616577726F65796669777368706F736A62716F626873697768203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169944.713:7753): pid=46198 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169944.715:7754): pid=46198 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169944.894:7755): pid=46198 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169944.894:7756): pid=46198 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169944.898:7757): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169944.899:7758): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169944.940:7759): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169944.940:7760): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169944.971:7761): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169944.971:7762): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169945.090:7763): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169945.090:7764): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169945.119:7765): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169945.119:7766): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169945.160:7767): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169945.161:7768): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169945.196:7769): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169945.197:7770): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169945.237:7771): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169945.238:7772): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169945.291:7773): pid=46260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169945.291:7774): pid=46260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716F6C6A6B6E726E7974646176676A676B7A78686B79717A736A6B6F6E756E62203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169945.292:7775): pid=46260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169945.294:7776): pid=46260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169945.461:7777): pid=46260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169945.461:7778): pid=46260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169945.465:7779): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169945.465:7780): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169945.513:7781): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169945.514:7782): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169945.549:7783): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169945.549:7784): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169945.590:7785): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169945.591:7786): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169945.622:7787): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169945.622:7788): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169945.663:7789): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169945.664:7790): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169945.720:7791): pid=46303 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169945.721:7792): pid=46303 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666973746766716A716A6975796E707568717362647175726A64627865697567203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169945.721:7793): pid=46303 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169945.723:7794): pid=46303 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169945.868:7795): pid=46303 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169945.868:7796): pid=46303 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169945.873:7797): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169945.873:7798): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169945.914:7799): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169945.914:7800): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169945.945:7801): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169945.945:7802): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169946.060:7803): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169946.060:7804): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169946.112:7805): pid=46333 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169946.112:7806): pid=46333 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777173716B616E7065747961776B7874726E6B797969636E66706A6F6575637A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169946.113:7807): pid=46333 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169946.115:7808): pid=46333 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1760169946.616:7809): prog-id=322 op=LOAD
type=BPF msg=audit(1760169946.616:7810): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169946.616:7811): prog-id=323 op=LOAD
type=BPF msg=audit(1760169946.616:7812): prog-id=324 op=LOAD
type=BPF msg=audit(1760169946.616:7813): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169946.616:7814): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169946.618:7815): prog-id=325 op=LOAD
type=BPF msg=audit(1760169946.618:7816): prog-id=326 op=LOAD
type=BPF msg=audit(1760169946.618:7817): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169946.618:7818): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169946.619:7819): prog-id=327 op=LOAD
type=BPF msg=audit(1760169946.619:7820): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169946.619:7821): prog-id=328 op=LOAD
type=BPF msg=audit(1760169946.619:7822): prog-id=329 op=LOAD
type=BPF msg=audit(1760169946.619:7823): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169946.619:7824): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169946.619:7825): prog-id=330 op=LOAD
type=BPF msg=audit(1760169946.619:7826): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169946.622:7827): prog-id=331 op=LOAD
type=BPF msg=audit(1760169946.622:7828): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169946.829:7829): prog-id=332 op=LOAD
type=BPF msg=audit(1760169946.829:7830): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169946.829:7831): prog-id=333 op=LOAD
type=BPF msg=audit(1760169946.829:7832): prog-id=334 op=LOAD
type=BPF msg=audit(1760169946.829:7833): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169946.829:7834): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169946.831:7835): prog-id=335 op=LOAD
type=BPF msg=audit(1760169946.831:7836): prog-id=336 op=LOAD
type=BPF msg=audit(1760169946.831:7837): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169946.831:7838): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169946.832:7839): prog-id=337 op=LOAD
type=BPF msg=audit(1760169946.832:7840): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169946.832:7841): prog-id=338 op=LOAD
type=BPF msg=audit(1760169946.832:7842): prog-id=339 op=LOAD
type=BPF msg=audit(1760169946.832:7843): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169946.832:7844): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169946.832:7845): prog-id=340 op=LOAD
type=BPF msg=audit(1760169946.832:7846): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169946.835:7847): prog-id=341 op=LOAD
type=BPF msg=audit(1760169946.835:7848): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1760169946.859:7849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760169946.859:7850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760169946.874:7851): pid=46333 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169946.875:7852): pid=46333 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169946.878:7853): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169946.878:7854): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169947.102:7855): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169947.102:7856): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169947.169:7857): pid=46427 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169947.169:7858): pid=46427 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66727863747163626B6D6566726A7170767374727A6869727271796D726D7364203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169947.170:7859): pid=46427 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169947.174:7860): pid=46427 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169947.369:7861): pid=46427 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169947.370:7862): pid=46427 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169947.374:7863): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169947.374:7864): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169947.614:7865): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169947.614:7866): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169947.674:7867): pid=46443 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169947.674:7868): pid=46443 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6E6971686D63686361766A69636C67786A6A64676A7474636C716F6D657678203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169947.675:7869): pid=46443 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169947.677:7870): pid=46443 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169948.057:7871): pid=46443 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169948.058:7872): pid=46443 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169948.062:7873): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169948.062:7874): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169948.626:7875): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169948.626:7876): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169948.689:7877): pid=46484 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169948.689:7878): pid=46484 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656E6D73767671657872726F66616269776778656D7A6B686A75657A646B6775203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169948.690:7879): pid=46484 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169948.692:7880): pid=46484 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1760169949.259:7881): prog-id=342 op=LOAD
type=SYSCALL msg=audit(1760169949.259:7881): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe2f687990 a2=90 a3=9500000000 items=0 ppid=46538 pid=46539 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169949.259:7881): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373639623166646138653630363831326365396663376233326335336464
type=BPF msg=audit(1760169949.307:7882): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169949.789:7883): prog-id=343 op=LOAD
type=SYSCALL msg=audit(1760169949.789:7883): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffa7827660 a2=90 a3=9500000000 items=0 ppid=46634 pid=46635 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760169949.789:7883): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653063393465393633626134643333663533616661373531346536333966
type=SERVICE_START msg=audit(1760169949.851:7884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760169950.089:7885): pid=46484 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169950.090:7886): pid=46484 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169950.094:7887): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169950.094:7888): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1760169950.172:7889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1760169950.271:7890): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169950.271:7891): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169950.333:7892): pid=46713 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169950.334:7893): pid=46713 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75736579767A736D6B6C6466796576646E6C65627271787A6B796E636E76717A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169950.334:7894): pid=46713 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169950.339:7895): pid=46713 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169950.504:7896): pid=46713 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169950.505:7897): pid=46713 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169950.509:7898): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169950.509:7899): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169950.550:7900): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169950.550:7901): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169950.603:7902): pid=46729 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169950.603:7903): pid=46729 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B796C70646A7275787867627269686D616B69727075787A65716776706E6278203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169950.604:7904): pid=46729 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169950.607:7905): pid=46729 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169950.774:7906): pid=46729 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169950.775:7907): pid=46729 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169950.779:7908): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169950.779:7909): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169950.821:7910): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169950.821:7911): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169950.851:7912): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169950.851:7913): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169950.892:7914): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169950.892:7915): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169950.928:7916): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169950.928:7917): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169951.180:7918): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169951.180:7919): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169951.228:7920): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169951.228:7921): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169951.269:7922): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169951.270:7923): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169951.323:7924): pid=46790 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169951.324:7925): pid=46790 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A667671776E626A69696D7667667966767A796D63726471657A687A77747962203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169951.324:7926): pid=46790 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169951.327:7927): pid=46790 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169951.500:7928): pid=46790 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169951.501:7929): pid=46790 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169951.504:7930): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169951.504:7931): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169951.545:7932): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169951.545:7933): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169951.606:7934): pid=46806 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169951.606:7935): pid=46806 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6975766877666F647463757278676368617A6871696D776E68727569746D6E6B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169951.607:7936): pid=46806 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169951.610:7937): pid=46806 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1760169952.046:7938): prog-id=344 op=LOAD
type=BPF msg=audit(1760169952.046:7939): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169952.046:7940): prog-id=345 op=LOAD
type=BPF msg=audit(1760169952.046:7941): prog-id=346 op=LOAD
type=BPF msg=audit(1760169952.046:7942): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169952.046:7943): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169952.048:7944): prog-id=347 op=LOAD
type=BPF msg=audit(1760169952.048:7945): prog-id=348 op=LOAD
type=BPF msg=audit(1760169952.048:7946): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169952.048:7947): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169952.049:7948): prog-id=349 op=LOAD
type=BPF msg=audit(1760169952.049:7949): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169952.049:7950): prog-id=350 op=LOAD
type=BPF msg=audit(1760169952.049:7951): prog-id=351 op=LOAD
type=BPF msg=audit(1760169952.049:7952): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169952.049:7953): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169952.049:7954): prog-id=352 op=LOAD
type=BPF msg=audit(1760169952.049:7955): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169952.052:7956): prog-id=353 op=LOAD
type=BPF msg=audit(1760169952.052:7957): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1760169952.083:7958): pid=46806 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169952.083:7959): pid=46806 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169952.088:7960): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169952.088:7961): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169952.340:7962): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169952.341:7963): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169952.402:7964): pid=46858 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169952.402:7965): pid=46858 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746766746F7768666463666C776A6378657A77767667787671686C6370636364203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169952.403:7966): pid=46858 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169952.406:7967): pid=46858 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1760169952.916:7968): prog-id=354 op=LOAD
type=BPF msg=audit(1760169952.916:7969): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169952.916:7970): prog-id=355 op=LOAD
type=BPF msg=audit(1760169952.916:7971): prog-id=356 op=LOAD
type=BPF msg=audit(1760169952.916:7972): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169952.916:7973): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169952.918:7974): prog-id=357 op=LOAD
type=BPF msg=audit(1760169952.918:7975): prog-id=358 op=LOAD
type=BPF msg=audit(1760169952.918:7976): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169952.918:7977): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169952.919:7978): prog-id=359 op=LOAD
type=BPF msg=audit(1760169952.919:7979): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169952.919:7980): prog-id=360 op=LOAD
type=BPF msg=audit(1760169952.919:7981): prog-id=361 op=LOAD
type=BPF msg=audit(1760169952.919:7982): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169952.919:7983): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169952.919:7984): prog-id=362 op=LOAD
type=BPF msg=audit(1760169952.919:7985): prog-id=0 op=UNLOAD
type=BPF msg=audit(1760169952.922:7986): prog-id=363 op=LOAD
type=BPF msg=audit(1760169952.922:7987): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1760169953.013:7988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_metrics_qdr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1760169953.042:7989): pid=46858 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169953.042:7990): pid=46858 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169953.046:7991): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169953.046:7992): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169953.087:7993): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169953.087:7994): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169953.109:7995): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169953.109:7996): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169953.217:7997): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169953.217:7998): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169953.276:7999): pid=46938 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169953.277:8000): pid=46938 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646763797277786C696F6A67647467756C6D61766A696C63626D657A65766A72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169953.277:8001): pid=46938 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169953.281:8002): pid=46938 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169953.455:8003): pid=46938 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169953.455:8004): pid=46938 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169953.458:8005): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169953.459:8006): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169953.706:8007): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169953.706:8008): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169953.735:8009): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169953.735:8010): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169953.777:8011): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169953.777:8012): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169953.812:8013): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169953.812:8014): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169953.854:8015): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169953.854:8016): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169953.914:8017): pid=46986 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169953.914:8018): pid=46986 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6F7072766E727069786977646C777774796C6E706E6D6E786474696E77696E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169953.915:8019): pid=46986 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169953.918:8020): pid=46986 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169954.074:8021): pid=46986 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169954.074:8022): pid=46986 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169954.078:8023): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169954.078:8024): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169954.121:8025): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169954.121:8026): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169954.156:8027): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169954.156:8028): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169954.198:8029): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169954.198:8030): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169954.228:8031): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169954.229:8032): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169954.270:8033): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169954.270:8034): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169954.330:8035): pid=47029 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169954.330:8036): pid=47029 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677176787663766371716B7666626F7172666C6D66627963717163756F78636A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169954.331:8037): pid=47029 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169954.333:8038): pid=47029 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169954.523:8039): pid=47029 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169954.524:8040): pid=47029 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169954.528:8041): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169954.528:8042): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169954.569:8043): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169954.569:8044): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1760169954.595:8045): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169954.595:8046): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169954.727:8047): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169954.728:8048): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169954.788:8049): pid=47059 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169954.788:8050): pid=47059 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71786868757571736370756D746F68656D66766A707673756B64766E73746C61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169954.789:8051): pid=47059 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169954.791:8052): pid=47059 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169954.977:8053): pid=47059 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169954.977:8054): pid=47059 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169954.981:8055): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169954.982:8056): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169955.353:8057): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169955.353:8058): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169955.417:8059): pid=47075 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169955.418:8060): pid=47075 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6470636F7979767A6B716D6571797873796574716E78656B756F6E74796D6D77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169955.418:8061): pid=47075 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169955.420:8062): pid=47075 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169955.599:8063): pid=47075 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169955.599:8064): pid=47075 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169955.602:8065): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169955.602:8066): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1760169955.771:8067): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1760169955.771:8068): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1760169955.823:8069): pid=47091 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1760169955.823:8070): pid=47091 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6B7369617A6675787974786B756D776A62696E766A66767372777274687079203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1760169955.824:8071): pid=47091 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1760169955.826:8072): pid=47091 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169955.999:8073): pid=47091 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760169955.999:8074): pid=47091 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1760169956.003:8075): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1760169956.003:8076): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1760169980.740:8077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760169981.069:8078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170011.745:8079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170012.052:8080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170042.740:8081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170043.010:8082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170073.740:8083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170074.058:8084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170104.745:8085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170105.068:8086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170135.740:8087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170136.067:8088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170166.742:8089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170167.060:8090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170197.740:8091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170198.018:8092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170228.739:8093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170229.045:8094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170259.744:8095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170260.033:8096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170290.740:8097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170291.003:8098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170321.684:8099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170321.974:8100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170352.742:8101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170353.028:8102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170383.740:8103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170384.047:8104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170414.740:8105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170415.003:8106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170445.745:8107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170446.066:8108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170476.740:8109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170477.001:8110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170507.744:8111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170508.024:8112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170538.740:8113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170539.028:8114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170569.741:8115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170570.043:8116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170600.742:8117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170601.062:8118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170631.741:8119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170632.040:8120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170662.742:8121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170663.050:8122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170693.744:8123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170694.034:8124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170724.744:8125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170725.084:8126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170755.742:8127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170756.024:8128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170786.741:8129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170787.057:8130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170817.741:8131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170818.050:8132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170848.740:8133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170849.041:8134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170879.739:8135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170880.050:8136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170910.741:8137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170911.073:8138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170941.739:8139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170942.004:8140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760170972.740:8141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760170973.012:8142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171003.743:8143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171004.049:8144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171034.746:8145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171035.053:8146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171065.754:8147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171066.049:8148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171096.741:8149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171097.005:8150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760171120.069:8151): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26122 suid=1000 rport=35946 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1760171120.075:8152): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1760171120.075:8153): pid=26119 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1760171127.744:8154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171128.087:8155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171158.744:8156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171159.036:8157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171189.744:8158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171190.044:8159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171220.755:8160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171221.042:8161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171251.740:8162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171252.091:8163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760171264.122:8164): pid=48334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c0:c8:7b:b2:da:94:49:86:56:dc:db:03:99:8d:a0:47:a4:3e:5c:d9:a5:6c:4d:9d:69:67:b1:8a:d6:02:89:ab direction=? spid=48334 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1760171264.214:8165): pid=48333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=48334 suid=74 rport=44576 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=43.251.161.75 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760171264.214:8166): pid=48333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=48334 suid=74 rport=44576 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=43.251.161.75 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1760171264.852:8167): pid=48333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=43.251.161.75 addr=43.251.161.75 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1760171268.488:8168): pid=48336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=43.251.161.75 addr=43.251.161.75 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1760171270.591:8169): pid=48333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=challenge-response acct="root" exe="/usr/sbin/sshd" hostname=? addr=43.251.161.75 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760171270.684:8170): pid=48333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=48334 suid=74 rport=44576 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=43.251.161.75 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1760171270.685:8171): pid=48333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c0:c8:7b:b2:da:94:49:86:56:dc:db:03:99:8d:a0:47:a4:3e:5c:d9:a5:6c:4d:9d:69:67:b1:8a:d6:02:89:ab direction=? spid=48334 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1760171270.687:8172): pid=48333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c0:c8:7b:b2:da:94:49:86:56:dc:db:03:99:8d:a0:47:a4:3e:5c:d9:a5:6c:4d:9d:69:67:b1:8a:d6:02:89:ab direction=? spid=48333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1760171270.687:8173): pid=48333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=43.251.161.75 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171282.740:8174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171283.052:8175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171313.742:8176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171314.033:8177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171344.739:8178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171345.091:8179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171375.749:8180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171376.068:8181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171406.740:8182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171407.073:8183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171437.744:8184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171438.063:8185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171468.740:8186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171469.069:8187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171499.739:8188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171500.034:8189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171530.744:8190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171531.069:8191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171561.740:8192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171562.043:8193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171592.741:8194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171593.045:8195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171623.740:8196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171624.021:8197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171654.747:8198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171655.034:8199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171685.740:8200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171686.001:8201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171716.741:8202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171717.062:8203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171747.740:8204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171748.017:8205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760171756.382:8206): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26445 suid=1002 rport=33226 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1760171756.386:8207): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1760171756.386:8208): pid=26425 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1760171766.492:8209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171766.532:8210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171778.740:8211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171779.089:8212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171809.739:8213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171810.067:8214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171840.743:8215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171841.045:8216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171871.744:8217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171872.069:8218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171902.744:8219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171903.088:8220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760171925.901:8221): pid=48962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c0:c8:7b:b2:da:94:49:86:56:dc:db:03:99:8d:a0:47:a4:3e:5c:d9:a5:6c:4d:9d:69:67:b1:8a:d6:02:89:ab direction=? spid=48962 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1760171926.171:8222): pid=48963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c0:c8:7b:b2:da:94:49:86:56:dc:db:03:99:8d:a0:47:a4:3e:5c:d9:a5:6c:4d:9d:69:67:b1:8a:d6:02:89:ab direction=? spid=48963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1760171933.746:8223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171934.077:8224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171964.742:8225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171965.048:8226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760171995.740:8227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760171996.008:8228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172026.745:8229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172027.055:8230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172057.742:8231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172058.039:8232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172088.744:8233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172089.041:8234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172119.741:8235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172120.078:8236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172150.748:8237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172151.109:8238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172181.745:8239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172182.091:8240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172212.743:8241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172213.042:8242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172243.748:8243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172244.075:8244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172274.741:8245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172275.029:8246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172305.742:8247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172306.009:8248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172336.745:8249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172337.044:8250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172367.739:8251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172368.026:8252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172398.741:8253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172399.020:8254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172429.740:8255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172430.035:8256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172460.741:8257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172461.057:8258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172491.740:8259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172492.060:8260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172522.740:8261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172523.062:8262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172553.741:8263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172554.059:8264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172584.739:8265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172585.028:8266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172615.740:8267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172616.053:8268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172646.740:8269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172647.047:8270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172677.740:8271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172678.024:8272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172708.752:8273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172709.057:8274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172739.740:8275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172740.037:8276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172770.741:8277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172771.052:8278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172801.740:8279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172802.075:8280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172832.745:8281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172833.042:8282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172863.740:8283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172864.032:8284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172894.742:8285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172895.041:8286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172925.741:8287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172926.042:8288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760172934.825:8289): pid=49939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c0:c8:7b:b2:da:94:49:86:56:dc:db:03:99:8d:a0:47:a4:3e:5c:d9:a5:6c:4d:9d:69:67:b1:8a:d6:02:89:ab direction=? spid=49939 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1760172935.141:8290): pid=49938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=49939 suid=74 rport=49256 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=39.104.64.139 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760172935.141:8291): pid=49938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=49939 suid=74 rport=49256 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=39.104.64.139 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1760172942.759:8292): pid=49938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49939 suid=74 rport=49256 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=39.104.64.139 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1760172942.760:8293): pid=49938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c0:c8:7b:b2:da:94:49:86:56:dc:db:03:99:8d:a0:47:a4:3e:5c:d9:a5:6c:4d:9d:69:67:b1:8a:d6:02:89:ab direction=? spid=49939 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1760172942.760:8294): pid=49938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=39.104.64.139 addr=39.104.64.139 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760172942.761:8295): pid=49938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c0:c8:7b:b2:da:94:49:86:56:dc:db:03:99:8d:a0:47:a4:3e:5c:d9:a5:6c:4d:9d:69:67:b1:8a:d6:02:89:ab direction=? spid=49938 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1760172942.761:8296): pid=49938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=39.104.64.139 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172956.745:8297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172957.084:8298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760172987.739:8299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760172988.086:8300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173018.741:8301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173019.040:8302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173049.739:8303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173050.000:8304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173080.744:8305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173081.052:8306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173111.740:8307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173112.060:8308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173142.739:8309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173143.036:8310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173173.741:8311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173174.059:8312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173204.740:8313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173205.034:8314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173235.740:8315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173235.995:8316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173266.740:8317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173267.033:8318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173297.746:8319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173298.066:8320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173328.741:8321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173329.094:8322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173359.749:8323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173360.093:8324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173390.749:8325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173391.079:8326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173421.741:8327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173422.093:8328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173452.742:8329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173453.071:8330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173483.743:8331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173484.061:8332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173514.740:8333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173515.046:8334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173545.740:8335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173546.067:8336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173576.745:8337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173577.046:8338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173607.741:8339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173608.024:8340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173638.740:8341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173639.024:8342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173669.741:8343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173670.029:8344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173700.740:8345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173701.041:8346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173731.745:8347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173732.039:8348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173762.739:8349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173763.020:8350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173793.740:8351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173793.997:8352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173824.740:8353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173825.027:8354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173855.740:8355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1760173856.059:8356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760173869.447:8357): pid=50843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c0:c8:7b:b2:da:94:49:86:56:dc:db:03:99:8d:a0:47:a4:3e:5c:d9:a5:6c:4d:9d:69:67:b1:8a:d6:02:89:ab direction=? spid=50843 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1760173869.448:8358): pid=50842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=50843 suid=74 rport=54126 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760173869.448:8359): pid=50842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=50843 suid=74 rport=54126 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1760173869.547:8360): pid=50842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1760173869.585:8361): pid=50842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760173869.585:8362): pid=50842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f9:f9:2d:84:9b:11:98:82:1c:1b:5f:64:0d:15:f2:4d:d4:1f:60:57:6e:98:13:17:d5:96:07:15:ae:68:dc:a5 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1760173869.616:8363): pid=50842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760173869.616:8364): pid=50842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=50843 suid=74 rport=54126 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1760173869.618:8365): pid=50842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1760173869.618:8366): pid=50842 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=16 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1760173869.618:8366): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff2b60c8e0 a2=4 a3=3e8 items=0 ppid=37506 pid=50842 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760173869.618:8366): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1760173869.620:8367): pid=50842 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1760173869.653:8368): pid=50842 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1760173869.654:8369): pid=50846 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c0:c8:7b:b2:da:94:49:86:56:dc:db:03:99:8d:a0:47:a4:3e:5c:d9:a5:6c:4d:9d:69:67:b1:8a:d6:02:89:ab direction=? spid=50846 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1760173869.656:8370): pid=50846 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1760173869.700:8371): pid=50842 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760173869.700:8372): pid=50842 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1760173869.701:8373): pid=50842 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c0:c8:7b:b2:da:94:49:86:56:dc:db:03:99:8d:a0:47:a4:3e:5c:d9:a5:6c:4d:9d:69:67:b1:8a:d6:02:89:ab direction=? spid=50847 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1760173869.771:8374): pid=50860 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760173869.771:8375): pid=50860 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7372646474636D786E7974677665696E616E766F786875656E7A777969747573203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760173869.773:8376): pid=50860 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760173869.777:8377): pid=50860 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760173870.590:8378): pid=50860 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1760173870.591:8379): pid=50860 uid=1000 auid=1000 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1760173870.595:8380): pid=50842 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1760173870.595:8381): pid=50842 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1760173875.914:8382): pid=50842 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=50846 suid=1000 rport=54126 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1760173875.914:8383): pid=50842 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c0:c8:7b:b2:da:94:49:86:56:dc:db:03:99:8d:a0:47:a4:3e:5c:d9:a5:6c:4d:9d:69:67:b1:8a:d6:02:89:ab direction=? spid=50846 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1760173875.918:8384): pid=50842 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1760173875.918:8385): pid=50842 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1760173875.919:8386): pid=50842 uid=0 auid=1000 ses=16 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c0:c8:7b:b2:da:94:49:86:56:dc:db:03:99:8d:a0:47:a4:3e:5c:d9:a5:6c:4d:9d:69:67:b1:8a:d6:02:89:ab direction=? spid=50842 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1760173886.394:8387): pid=50868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c0:c8:7b:b2:da:94:49:86:56:dc:db:03:99:8d:a0:47:a4:3e:5c:d9:a5:6c:4d:9d:69:67:b1:8a:d6:02:89:ab direction=? spid=50868 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1760173886.395:8388): pid=50867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=50868 suid=74 rport=54012 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1760173886.395:8389): pid=50867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=50868 suid=74 rport=54012 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1760173886.477:8390): pid=50867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1760173886.477:8391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e0c94e963ba4d33f53afa7514e639f77367bfe712b624e84923818830f804811 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1760173886.500:8392): pid=50867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760173886.500:8393): pid=50867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:f9:f9:2d:84:9b:11:98:82:1c:1b:5f:64:0d:15:f2:4d:d4:1f:60:57:6e:98:13:17:d5:96:07:15:ae:68:dc:a5 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1760173886.531:8394): pid=50867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1760173886.531:8395): pid=50867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=50868 suid=74 rport=54012 laddr=38.102.83.202 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1760173886.534:8396): pid=50867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1760173886.534:8397): pid=50867 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=17 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1760173886.534:8397): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff6fd1bb50 a2=4 a3=3e8 items=0 ppid=37506 pid=50867 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1760173886.534:8397): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1760173886.535:8398): pid=50867 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1760173886.568:8399): pid=50867 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1760173886.569:8400): pid=50888 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c0:c8:7b:b2:da:94:49:86:56:dc:db:03:99:8d:a0:47:a4:3e:5c:d9:a5:6c:4d:9d:69:67:b1:8a:d6:02:89:ab direction=? spid=50888 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1760173886.575:8401): pid=50888 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1760173886.619:8402): pid=50867 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1760173886.619:8403): pid=50867 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1760173886.622:8404): pid=50867 uid=0 auid=1000 ses=17 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:c0:c8:7b:b2:da:94:49:86:56:dc:db:03:99:8d:a0:47:a4:3e:5c:d9:a5:6c:4d:9d:69:67:b1:8a:d6:02:89:ab direction=? spid=50902 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1760173886.684:8405): pid=50902 uid=1000 auid=1000 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1760173886.685:8406): pid=50902 uid=1000 auid=1000 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=7273796E63202D2D736572766572202D2D73656E646572202D6C4C6F67447470727A652E4C73667843202E202F7661722F6C6F67 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1760173886.686:8407): pid=50902 uid=1000 auid=1000 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1760173886.689:8408): pid=50902 uid=1000 auid=1000 ses=17 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"