type=DAEMON_START msg=audit(1765867625.618:791): op=start ver=3.0.7 format=enriched kernel=5.14.0-284.11.1.el9_2.x86_64 auid=4294967295 pid=717 uid=0 ses=4294967295 subj=system_u:system_r:auditd_t:s0 res=successAUID="unset" UID="root"
type=SERVICE_START msg=audit(1765867625.628:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867625.643:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867625.646:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpcbind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CONFIG_CHANGE msg=audit(1765867625.660:8): op=set audit_backlog_limit=8192 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1765867625.660:8): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffc14f81430 a2=3c a3=0 items=0 ppid=722 pid=738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765867625.660:8): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1765867625.660:9): op=set audit_failure=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1765867625.660:9): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffc14f81430 a2=3c a3=0 items=0 ppid=722 pid=738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765867625.660:9): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=CONFIG_CHANGE msg=audit(1765867625.660:10): op=set audit_backlog_wait_time=60000 old=60000 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 res=1AUID="unset"
type=SYSCALL msg=audit(1765867625.660:10): arch=c000003e syscall=44 success=yes exit=60 a0=3 a1=7ffc14f81430 a2=3c a3=0 items=0 ppid=722 pid=738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:unconfined_service_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendto AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765867625.660:10): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573
type=SERVICE_START msg=audit(1765867625.664:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=auditd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_BOOT msg=audit(1765867625.672:12): pid=746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867625.676:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765867625.696:14): prog-id=21 op=LOAD
type=SERVICE_START msg=audit(1765867625.721:15): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbus-broker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765867625.724:16): prog-id=22 op=LOAD
type=SERVICE_START msg=audit(1765867625.733:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=irqbalance comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765867625.742:18): prog-id=23 op=LOAD
type=BPF msg=audit(1765867625.742:19): prog-id=24 op=LOAD
type=BPF msg=audit(1765867625.742:20): prog-id=25 op=LOAD
type=SERVICE_START msg=audit(1765867625.747:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dracut-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867625.749:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867625.792:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867625.801:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-logind comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765867626.311:25): prog-id=26 op=LOAD
type=BPF msg=audit(1765867626.311:26): prog-id=27 op=LOAD
type=SERVICE_START msg=audit(1765867626.390:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867626.492:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init-local comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867626.546:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867626.565:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rhsmcertd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867626.576:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=gssproxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867626.602:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867626.624:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867627.043:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867627.085:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=polkit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ADD_GROUP msg=audit(1765867628.337:36): pid=1116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-group acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ADD_USER msg=audit(1765867628.340:37): pid=1116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1765867628.341:38): pid=1116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="adm" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1765867628.341:39): pid=1116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-user-to-group grp="systemd-journal" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1765867628.341:40): pid=1116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="adm" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1765867628.341:41): pid=1116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-to-shadow-group grp="systemd-journal" acct="cloud-user" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_MGMT msg=audit(1765867628.430:42): pid=1116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=add-home-dir id=1001 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="cloud-user"
type=ACCT_LOCK msg=audit(1765867628.469:43): pid=1123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:passwd_t:s0 msg='op=locked-password id=1001 exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="cloud-user"
type=SERVICE_START msg=audit(1765867629.566:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-init comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867629.609:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-user-sessions comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867629.611:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867629.617:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867629.620:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=getty@tty1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867629.625:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=serial-getty@ttyS0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867629.639:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rpc-statd-notify comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSTEM_RUNLEVEL msg=audit(1765867629.643:51): pid=1148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867629.647:52): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765867629.647:53): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-update-utmp-runlevel comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765867629.843:54): pid=1248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1256 suid=74 rport=34790 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765867629.843:55): pid=1248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1256 suid=74 rport=34790 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765867629.848:56): pid=1248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1256 suid=74 rport=34790 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1765867629.850:57): pid=1248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765867629.873:58): pid=1269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765867629.891:59): pid=1283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1296 suid=74 rport=34818 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765867629.891:60): pid=1283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1296 suid=74 rport=34818 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1765867629.921:61): pid=1302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765867629.939:62): pid=1318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765867629.958:63): pid=1327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1335 suid=74 rport=34860 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765867629.958:64): pid=1327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1335 suid=74 rport=34860 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1765867629.969:65): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765867629.984:66): pid=1350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1356 suid=74 rport=34876 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765867629.984:67): pid=1350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1356 suid=74 rport=34876 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765867629.991:68): pid=1350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1356 suid=74 rport=34876 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1765867629.992:69): pid=1350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765867629.995:70): pid=1283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1296 suid=74 rport=34818 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1765867629.996:71): pid=1283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765867630.008:72): pid=1362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1374 suid=74 rport=34892 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765867630.008:73): pid=1362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=1374 suid=74 rport=34892 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1765867630.010:74): pid=1362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765867630.035:75): pid=1383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765867630.070:76): pid=1327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1335 suid=74 rport=34860 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1765867630.072:77): pid=1327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867630.544:78): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cloud-final comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765867636.735:79): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867638.969:80): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=kdump comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765867647.547:81): pid=4170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=4171 suid=74 rport=44854 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765867647.547:82): pid=4170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=4171 suid=74 rport=44854 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765867647.611:83): pid=4170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765867647.611:84): pid=4170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ce:1b:37:32:25:b4:26:1c:73:72:46:1c:30:74:04:4b:c4:8c:60:78:f5:88:67:28:9a:7c:b3:99:b8:b0:a2:bf exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765867647.653:85): pid=4170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765867647.656:86): pid=4170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4171 suid=74 rport=44854 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765867647.661:87): pid=4170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765867647.661:88): pid=4170 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=1 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765867647.661:88): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcb2749820 a2=4 a3=3e8 items=0 ppid=1130 pid=4170 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765867647.661:88): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765867647.664:89): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1765867647.701:90): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765867647.734:91): pid=4174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1765867647.734:92): pid=4174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1765867647.735:93): pid=4174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765867647.735:94): pid=4174 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=2 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765867647.735:94): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffe54545d80 a2=4 a3=3e8 items=0 ppid=1 pid=4174 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765867647.735:94): proctitle="(systemd)"
type=USER_START msg=audit(1765867647.737:95): pid=4174 uid=0 auid=1000 ses=2 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1765867647.849:96): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765867647.861:97): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1765867647.864:98): pid=4183 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765867647.907:99): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867647.907:100): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867647.948:101): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867647.948:102): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867647.967:103): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867647.967:104): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867648.053:105): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867648.053:106): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867648.071:107): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867648.071:108): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867648.407:109): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867648.407:110): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1765867656.559:111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765867656.593:112): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765867656.593:113): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1765867657.340:114): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867657.340:115): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867658.405:116): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867658.405:117): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867666.246:118): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867666.246:119): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867666.647:120): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867666.647:121): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867667.542:122): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867667.542:123): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867667.770:124): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867667.770:125): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867670.286:126): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867670.287:127): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867670.546:128): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867670.546:129): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867670.961:130): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867670.961:131): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867671.146:132): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867671.146:133): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867672.053:134): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867672.053:135): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867672.086:136): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867672.086:137): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867672.095:138): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867672.095:139): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867672.137:140): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867672.137:141): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867672.153:142): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867672.153:143): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867672.183:144): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867672.184:145): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867672.191:146): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867672.191:147): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867672.350:148): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867672.350:149): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867672.369:150): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867672.369:151): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867672.409:152): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867672.409:153): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867672.448:154): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867672.448:155): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867672.478:156): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867672.478:157): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867672.493:158): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867672.493:159): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867672.695:160): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867672.695:161): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867672.709:162): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867672.709:163): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867672.743:164): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867672.743:165): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867673.748:166): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867673.748:167): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867673.783:168): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867673.783:169): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867673.792:170): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867673.792:171): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867673.830:172): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867673.830:173): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867673.837:174): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867673.837:175): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867673.868:176): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867673.868:177): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867673.878:178): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867673.878:179): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867674.068:180): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867674.068:181): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867674.091:182): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867674.091:183): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867674.132:184): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867674.132:185): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867674.147:186): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867674.147:187): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867674.176:188): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867674.176:189): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867674.190:190): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867674.190:191): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867674.395:192): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867674.395:193): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867674.408:194): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867674.408:195): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867674.446:196): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867674.446:197): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867675.815:198): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867675.815:199): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867676.043:200): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867676.044:201): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867677.897:202): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867677.897:203): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867678.612:204): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867678.612:205): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867680.858:206): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867680.858:207): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867681.116:208): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867681.116:209): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867683.537:210): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867683.537:211): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867683.748:212): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867683.748:213): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867683.782:214): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867683.782:215): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867683.992:216): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867683.992:217): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867684.019:218): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867684.019:219): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867684.203:220): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867684.204:221): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867685.105:222): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867685.106:223): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867685.310:224): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867685.310:225): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867685.343:226): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867685.343:227): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867685.549:228): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867685.549:229): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867685.599:230): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867685.599:231): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867685.803:232): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867685.804:233): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867688.056:234): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867688.056:235): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765867688.125:236): pid=4776 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765867688.126:237): pid=4776 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6965786976716F74627470786A666E6163756872717A787175786F61627A6E64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765867688.128:238): pid=4776 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765867688.134:239): pid=4776 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867688.322:240): pid=4776 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765867688.322:241): pid=4776 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867688.326:242): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867688.327:243): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867689.484:244): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867689.484:245): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867689.516:246): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867689.516:247): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867689.525:248): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867689.525:249): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867689.562:250): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867689.563:251): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867689.587:252): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867689.587:253): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765867689.656:254): pid=4824 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765867689.656:255): pid=4824 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6373637175756F78626D73647470677879756B657169796363727A73796A726A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765867689.657:256): pid=4824 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765867689.659:257): pid=4824 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867689.818:258): pid=4824 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765867689.819:259): pid=4824 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867689.823:260): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867689.824:261): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867689.846:262): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867689.846:263): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867689.886:264): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867689.886:265): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867689.907:266): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867689.907:267): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867689.941:268): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867689.941:269): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867689.954:270): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867689.955:271): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765867690.011:272): pid=4867 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765867690.011:273): pid=4867 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646F7666667971736C6965777265747371776570796D6D676269726A6A636463203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765867690.012:274): pid=4867 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765867690.014:275): pid=4867 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867690.175:276): pid=4867 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765867690.175:277): pid=4867 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867690.180:278): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867690.180:279): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867690.207:280): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867690.208:281): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867690.240:282): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867690.240:283): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867697.378:284): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867697.378:285): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867697.591:286): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867697.591:287): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867697.615:288): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867697.615:289): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867697.841:290): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867697.841:291): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867697.866:292): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867697.866:293): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867698.073:294): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867698.074:295): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867698.098:296): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867698.098:297): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867698.302:298): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867698.302:299): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867698.340:300): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867698.340:301): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867698.589:302): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867698.589:303): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867698.618:304): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867698.618:305): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867698.824:306): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867698.824:307): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867698.846:308): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867698.846:309): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867699.127:310): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867699.127:311): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867699.148:312): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867699.148:313): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867699.411:314): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867699.411:315): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867699.431:316): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867699.431:317): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867699.644:318): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867699.644:319): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867699.662:320): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867699.662:321): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867699.869:322): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867699.869:323): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867699.893:324): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867699.893:325): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867700.103:326): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867700.103:327): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867700.135:328): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867700.135:329): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867700.403:330): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867700.403:331): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867700.428:332): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867700.428:333): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867700.673:334): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867700.673:335): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867700.713:336): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867700.713:337): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867700.974:338): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867700.974:339): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867701.003:340): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867701.003:341): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867701.260:342): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867701.260:343): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867701.299:344): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867701.299:345): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867701.527:346): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867701.527:347): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867701.557:348): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867701.557:349): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867701.805:350): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867701.805:351): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867701.838:352): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867701.838:353): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867702.074:354): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867702.074:355): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867702.088:356): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867702.088:357): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867702.314:358): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867702.314:359): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867702.332:360): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867702.332:361): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867702.582:362): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867702.582:363): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867702.606:364): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867702.606:365): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867702.856:366): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867702.856:367): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867702.878:368): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867702.878:369): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867703.121:370): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867703.121:371): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867703.145:372): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867703.145:373): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867703.355:374): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867703.355:375): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867703.378:376): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867703.378:377): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867703.626:378): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867703.626:379): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867703.650:380): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867703.650:381): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867703.903:382): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867703.903:383): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867703.927:384): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867703.927:385): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867704.166:386): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867704.166:387): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867706.077:388): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867706.077:389): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765867706.139:390): pid=5262 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765867706.139:391): pid=5262 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756B6D6267706E6E696E7A726D776C696775766571706471766F70766F637877203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765867706.140:392): pid=5262 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765867706.143:393): pid=5262 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1765867706.296:394): prog-id=28 op=LOAD
type=BPF msg=audit(1765867706.297:395): prog-id=29 op=LOAD
type=BPF msg=audit(1765867706.297:396): prog-id=30 op=LOAD
type=SERVICE_START msg=audit(1765867706.376:397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765867706.431:398): pid=5262 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765867706.431:399): pid=5262 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867706.436:400): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867706.436:401): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867707.940:402): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867707.940:403): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765867708.004:404): pid=5283 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765867708.004:405): pid=5283 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647466796A6172646A70686564706C7A646B64747672796363627A71696E6375203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765867708.005:406): pid=5283 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765867708.008:407): pid=5283 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867708.180:408): pid=5283 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765867708.180:409): pid=5283 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867708.184:410): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867708.184:411): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867709.018:412): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867709.018:413): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867709.050:414): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867709.050:415): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867709.059:416): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867709.059:417): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867709.097:418): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867709.097:419): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867709.111:420): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867709.111:421): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867709.311:422): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867709.311:423): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867709.334:424): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867709.334:425): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867709.368:426): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867709.368:427): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867709.382:428): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867709.382:429): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867709.412:430): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867709.412:431): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867709.426:432): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867709.426:433): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867709.642:434): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867709.642:435): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867709.656:436): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867709.656:437): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867709.681:438): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867709.681:439): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867710.485:440): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867710.485:441): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867710.517:442): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867710.517:443): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867710.525:444): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867710.525:445): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867710.563:446): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867710.563:447): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867710.573:448): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867710.573:449): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867710.756:450): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867710.756:451): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867710.775:452): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867710.775:453): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867710.814:454): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867710.814:455): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867710.830:456): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867710.830:457): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867710.860:458): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867710.860:459): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867710.874:460): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867710.874:461): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867711.093:462): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867711.093:463): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867711.106:464): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867711.106:465): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867711.137:466): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867711.137:467): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867712.531:468): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867712.531:469): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867712.561:470): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867712.561:471): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867712.570:472): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867712.570:473): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867712.605:474): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867712.605:475): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867712.619:476): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867712.619:477): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765867712.678:478): pid=5533 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765867712.678:479): pid=5533 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697A6F6479666D6261796F786D7373797A706C79667561716F7A746574727767203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765867712.679:480): pid=5533 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765867712.681:481): pid=5533 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867712.841:482): pid=5533 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765867712.842:483): pid=5533 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867712.845:484): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867712.845:485): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867712.866:486): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867712.866:487): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867712.896:488): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867712.896:489): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867712.909:490): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867712.909:491): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867712.936:492): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867712.936:493): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867712.946:494): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867712.946:495): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765867713.003:496): pid=5576 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765867713.003:497): pid=5576 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C797665736366647266656D6F72646C6D666A7865776663716B63666D72706E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765867713.004:498): pid=5576 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765867713.006:499): pid=5576 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867713.175:500): pid=5576 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765867713.175:501): pid=5576 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867713.179:502): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867713.179:503): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867713.191:504): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867713.191:505): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867713.226:506): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867713.226:507): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867714.104:508): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867714.105:509): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867714.305:510): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867714.305:511): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867714.328:512): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867714.328:513): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867714.536:514): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867714.536:515): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867715.483:516): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867715.483:517): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867715.517:518): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867715.517:519): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867715.534:520): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867715.535:521): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867715.569:522): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867715.570:523): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867715.580:524): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867715.580:525): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765867715.640:526): pid=5670 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765867715.640:527): pid=5670 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67726F746D78766B6A69666A646B63716265786F79717A6D786D6F6A6A766C64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765867715.641:528): pid=5670 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765867715.642:529): pid=5670 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867715.808:530): pid=5670 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765867715.808:531): pid=5670 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867715.812:532): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867715.813:533): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867715.835:534): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867715.835:535): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867715.875:536): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867715.876:537): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867715.890:538): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867715.891:539): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867715.924:540): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867715.924:541): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867715.942:542): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867715.942:543): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765867716.004:544): pid=5713 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765867716.004:545): pid=5713 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67666A79616D6570686E6C617574667563686E6F64766C6F7073666A686A6371203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765867716.005:546): pid=5713 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765867716.007:547): pid=5713 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867716.170:548): pid=5713 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765867716.170:549): pid=5713 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867716.174:550): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867716.174:551): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867716.189:552): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867716.189:553): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867716.220:554): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867716.220:555): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867717.190:556): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867717.190:557): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765867717.253:558): pid=5744 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765867717.254:559): pid=5744 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63677777766B61796B7563646C73766F676A6864686D686A696467726A65757A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765867717.255:560): pid=5744 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765867717.258:561): pid=5744 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867718.280:562): pid=5744 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765867718.281:563): pid=5744 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867718.285:564): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867718.285:565): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867719.225:566): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867719.225:567): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867719.445:568): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867719.445:569): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867721.030:570): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867721.030:571): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867721.242:572): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867721.242:573): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1765867736.452:574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765867736.461:575): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765867736.461:576): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765867736.461:577): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1765867740.098:578): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867740.098:579): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765867740.158:580): pid=5798 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765867740.158:581): pid=5798 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B62656D66786F696470716775686472687669666D756D6E796B7871617A6966203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765867740.159:582): pid=5798 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765867740.162:583): pid=5798 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867740.337:584): pid=5798 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765867740.337:585): pid=5798 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867740.341:586): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867740.341:587): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765867800.407:588): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4183 suid=1000 rport=44854 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765867800.410:589): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765867800.410:590): pid=4170 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1765867952.740:591): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=5811 suid=74 rport=47794 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765867952.741:592): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=5811 suid=74 rport=47794 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765867952.798:593): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765867952.815:594): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765867952.815:595): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:29:9d:95:92:cc:83:72:06:42:ed:10:a4:bb:f5:f1:c1:fd:52:87:f6:ff:80:d7:0b:00:09:15:05:9a:b6:13:82 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765867952.846:596): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765867952.846:597): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5811 suid=74 rport=47794 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765867952.848:598): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765867952.848:599): pid=5810 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=3 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765867952.848:599): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc3d519e00 a2=4 a3=3e8 items=0 ppid=1130 pid=5810 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=3 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765867952.848:599): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765867952.850:600): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765867952.869:601): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1765867952.872:602): pid=5813 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765867952.915:603): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867952.915:604): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867953.120:605): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867953.120:606): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867966.043:607): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867966.043:608): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867966.075:609): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867966.075:610): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867966.087:611): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867966.088:612): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867966.123:613): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867966.123:614): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867966.173:615): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867966.173:616): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765867966.233:617): pid=5876 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765867966.234:618): pid=5876 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E636F6461676670767372726C69756969776B756662616D617A6D767A666678203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765867966.235:619): pid=5876 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765867966.240:620): pid=5876 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867966.394:621): pid=5876 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765867966.395:622): pid=5876 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867966.398:623): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867966.399:624): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867966.411:625): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867966.411:626): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867966.448:627): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867966.448:628): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867966.456:629): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867966.457:630): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867966.484:631): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867966.484:632): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867966.494:633): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867966.494:634): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765867966.544:635): pid=5919 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765867966.544:636): pid=5919 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756F6D6375617877647461737A6A61796B766C7A6D636F687275636374707161203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765867966.544:637): pid=5919 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765867966.547:638): pid=5919 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867966.717:639): pid=5919 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765867966.718:640): pid=5919 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867966.722:641): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867966.722:642): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867966.732:643): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867966.732:644): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867966.756:645): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867966.756:646): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765867966.961:647): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867966.962:648): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765867967.019:649): pid=5949 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765867967.020:650): pid=5949 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63657579697268777263616961646E766E676A727867666B636869696A636C69203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765867967.021:651): pid=5949 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765867967.023:652): pid=5949 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_STOP msg=audit(1765867968.302:653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867968.335:654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765867968.359:655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765867968.396:656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765867968.407:657): prog-id=31 op=LOAD
type=BPF msg=audit(1765867968.407:658): prog-id=32 op=LOAD
type=USER_END msg=audit(1765867968.424:659): pid=5949 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765867968.424:660): pid=5949 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765867968.429:661): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867968.429:662): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765867968.476:663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765867968.543:664): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765867968.543:665): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765867968.747:666): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765867968.747:667): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1765867978.617:668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765867998.510:669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765867998.544:670): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765867998.544:671): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765868013.865:672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765868013.872:673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765868023.908:674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765868028.776:675): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5813 suid=1000 rport=47794 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765868028.781:676): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765868028.781:677): pid=5810 uid=0 auid=1000 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1765868071.920:678): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6054 suid=74 rport=32788 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765868071.920:679): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6054 suid=74 rport=32788 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765868071.976:680): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765868071.993:681): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765868071.993:682): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:29:9d:95:92:cc:83:72:06:42:ed:10:a4:bb:f5:f1:c1:fd:52:87:f6:ff:80:d7:0b:00:09:15:05:9a:b6:13:82 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765868072.024:683): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765868072.025:684): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6054 suid=74 rport=32788 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765868072.027:685): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765868072.027:686): pid=6053 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=4 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765868072.027:686): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe2ef18c20 a2=4 a3=3e8 items=0 ppid=1130 pid=6053 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765868072.027:686): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765868072.029:687): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765868072.049:688): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1765868072.051:689): pid=6056 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765868072.094:690): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868072.094:691): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868072.125:692): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868072.125:693): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868072.141:694): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868072.141:695): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868072.173:696): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868072.173:697): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868072.184:698): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868072.184:699): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868072.244:700): pid=6102 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868072.244:701): pid=6102 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666977726A756A63656B69756377766E6B696A6E69617A737673667975736868203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868072.245:702): pid=6102 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868072.249:703): pid=6102 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868072.409:704): pid=6102 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868072.410:705): pid=6102 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868072.414:706): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868072.414:707): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868072.434:708): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868072.434:709): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868072.467:710): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868072.468:711): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868072.484:712): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868072.484:713): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868072.504:714): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868072.504:715): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868072.518:716): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868072.518:717): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868072.551:718): pid=6145 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868072.551:719): pid=6145 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67767074647370617862706873796B7372666773726B736572736C6468616B68203B204F535F434C4F55443D76657878686F7374202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868072.552:720): pid=6145 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868072.553:721): pid=6145 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868072.727:722): pid=6145 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868072.727:723): pid=6145 uid=1000 auid=1000 ses=4 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868072.731:724): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868072.731:725): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868072.747:726): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868072.747:727): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868072.777:728): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868072.777:729): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765868076.039:730): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6056 suid=1000 rport=32788 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765868076.041:731): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765868076.041:732): pid=6053 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1765868228.822:733): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=6163 suid=74 rport=19974 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.7 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765868228.823:734): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=6163 suid=74 rport=19974 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.7 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765868229.457:735): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6163 suid=74 rport=19974 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.7 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765868229.458:736): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=193.46.255.7 addr=193.46.255.7 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765868229.458:737): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.7 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765868319.597:738): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6166 suid=74 rport=36766 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765868319.598:739): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6166 suid=74 rport=36766 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765868320.066:740): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6166 suid=74 rport=36766 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765868320.067:741): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=78.128.112.74 addr=78.128.112.74 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765868320.068:742): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765868358.880:743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765868358.880:744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765868491.619:745): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6186 suid=74 rport=36916 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765868491.619:746): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6186 suid=74 rport=36916 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765868491.674:747): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765868491.692:748): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765868491.692:749): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:29:9d:95:92:cc:83:72:06:42:ed:10:a4:bb:f5:f1:c1:fd:52:87:f6:ff:80:d7:0b:00:09:15:05:9a:b6:13:82 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765868491.725:750): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765868491.725:751): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6186 suid=74 rport=36916 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765868491.727:752): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765868491.727:753): pid=6185 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=5 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765868491.727:753): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd805f4f50 a2=4 a3=3e8 items=0 ppid=1130 pid=6185 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=5 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765868491.727:753): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765868491.729:754): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765868491.745:755): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1765868491.747:756): pid=6188 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765868491.790:757): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868491.790:758): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868491.854:759): pid=6202 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868491.854:760): pid=6202 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737574776B787A6E66766164786A74616C756C6C6B776C6C7466686A646C776F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868491.856:761): pid=6202 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868491.859:762): pid=6202 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868492.013:763): pid=6202 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868492.013:764): pid=6202 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868492.017:765): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868492.017:766): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868493.317:767): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868493.317:768): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868493.367:769): pid=6221 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868493.367:770): pid=6221 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746E6F7565717477637567666263727674777977726168716262706870706E72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868493.368:771): pid=6221 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868493.370:772): pid=6221 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868493.497:773): pid=6221 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868493.497:774): pid=6221 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868493.501:775): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868493.501:776): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868493.541:777): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868493.541:778): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868493.597:779): pid=6237 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868493.597:780): pid=6237 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766C616D70677A6365737273746B69676C66667178706E767369696778626A73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868493.598:781): pid=6237 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868493.600:782): pid=6237 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868493.761:783): pid=6237 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868493.762:784): pid=6237 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868493.765:785): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868493.765:786): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868493.801:787): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868493.801:788): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868493.854:789): pid=6253 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868493.854:790): pid=6253 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6466797466726C63636174747067696772627567787A7874746875656E6866203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868493.854:791): pid=6253 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868493.856:792): pid=6253 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868494.019:793): pid=6253 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868494.019:794): pid=6253 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868494.022:795): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868494.022:796): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868494.057:797): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868494.057:798): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868494.099:799): pid=6269 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868494.099:800): pid=6269 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E717865786D6F797A626562747262656669776571646974716D7264756E7677203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868494.100:801): pid=6269 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868494.102:802): pid=6269 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868494.246:803): pid=6269 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868494.246:804): pid=6269 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868494.250:805): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868494.250:806): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868494.798:807): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868494.799:808): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868494.857:809): pid=6285 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868494.857:810): pid=6285 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6870707A63756A686C78797262746F7474776F676673696A7267686F6B746A77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868494.858:811): pid=6285 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868494.861:812): pid=6285 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868495.035:813): pid=6285 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868495.035:814): pid=6285 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868495.038:815): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868495.038:816): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868495.920:817): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868495.920:818): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868495.940:819): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868495.940:820): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868495.951:821): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868495.951:822): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868495.977:823): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868495.977:824): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868495.995:825): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868495.995:826): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868496.048:827): pid=6333 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868496.049:828): pid=6333 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77706A766E7A6F65776C6C6F616D7368627874766379766871616F726F776263203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868496.049:829): pid=6333 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868496.051:830): pid=6333 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868496.192:831): pid=6333 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868496.192:832): pid=6333 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868496.195:833): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868496.196:834): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868496.213:835): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868496.213:836): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868496.243:837): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868496.243:838): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868496.252:839): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868496.252:840): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868496.274:841): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868496.274:842): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868496.280:843): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868496.281:844): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868496.333:845): pid=6376 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868496.334:846): pid=6376 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736E68796468666A65666E616C6C666570696E696E6676777376796E7969736B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868496.335:847): pid=6376 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868496.338:848): pid=6376 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868496.531:849): pid=6376 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868496.532:850): pid=6376 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868496.536:851): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868496.536:852): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868496.549:853): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868496.549:854): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868496.579:855): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868496.579:856): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868497.855:857): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868497.856:858): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868497.915:859): pid=6406 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868497.915:860): pid=6406 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7661646D69666D6A716F72656B766C6E747663717673686B646D636A6A64766E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868497.916:861): pid=6406 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868497.918:862): pid=6406 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1765868498.390:863): prog-id=33 op=LOAD
type=BPF msg=audit(1765868498.391:864): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765868498.391:865): prog-id=34 op=LOAD
type=BPF msg=audit(1765868498.391:866): prog-id=35 op=LOAD
type=BPF msg=audit(1765868498.391:867): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765868498.391:868): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765868498.392:869): prog-id=36 op=LOAD
type=BPF msg=audit(1765868498.392:870): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765868498.392:871): prog-id=37 op=LOAD
type=BPF msg=audit(1765868498.392:872): prog-id=38 op=LOAD
type=BPF msg=audit(1765868498.392:873): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765868498.392:874): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765868498.393:875): prog-id=39 op=LOAD
type=BPF msg=audit(1765868498.393:876): prog-id=40 op=LOAD
type=BPF msg=audit(1765868498.393:877): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765868498.393:878): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765868498.394:879): prog-id=41 op=LOAD
type=BPF msg=audit(1765868498.394:880): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765868498.396:881): prog-id=42 op=LOAD
type=BPF msg=audit(1765868498.396:882): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765868498.435:883): pid=6406 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868498.435:884): pid=6406 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868498.440:885): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868498.441:886): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868499.419:887): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868499.419:888): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868499.482:889): pid=6453 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868499.483:890): pid=6453 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72776D67736B736C7A70707361796F6E726D7769787A6A69636674786B626271203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868499.484:891): pid=6453 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868499.489:892): pid=6453 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868499.670:893): pid=6453 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868499.670:894): pid=6453 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868499.674:895): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868499.674:896): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868500.973:897): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868500.973:898): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868501.034:899): pid=6469 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868501.034:900): pid=6469 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727163726B6767796C74726E65676F6B746779756166636C676C727970756A78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868501.035:901): pid=6469 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868501.037:902): pid=6469 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868501.210:903): pid=6469 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868501.211:904): pid=6469 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868501.215:905): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868501.215:906): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868501.249:907): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868501.249:908): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868501.304:909): pid=6487 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868501.304:910): pid=6487 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74757A64647A70626475716F706769636B786D74756C6D617562676276697264203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868501.304:911): pid=6487 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868501.307:912): pid=6487 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868501.504:913): pid=6487 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868501.505:914): pid=6487 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868501.508:915): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868501.508:916): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868501.527:917): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868501.527:918): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868501.581:919): pid=6505 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868501.581:920): pid=6505 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727A64667371697564786B79726B67786F646775766F737A7072657567757468203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868501.582:921): pid=6505 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868501.583:922): pid=6505 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868501.752:923): pid=6505 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868501.752:924): pid=6505 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868501.756:925): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868501.756:926): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868501.792:927): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868501.792:928): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868501.853:929): pid=6523 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868501.853:930): pid=6523 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75786D706F647A6C6B6C62726D717362776F776E636C65616264616F7A767668203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868501.853:931): pid=6523 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868501.856:932): pid=6523 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868502.032:933): pid=6523 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868502.033:934): pid=6523 uid=1000 auid=1000 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868502.037:935): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868502.037:936): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868503.018:937): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868503.018:938): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868503.199:939): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868503.199:940): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868503.609:941): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868503.609:942): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868503.804:943): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868503.804:944): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765868506.425:945): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6188 suid=1000 rport=36916 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765868506.429:946): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765868506.429:947): pid=6185 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1765868538.536:948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765868538.536:949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765868585.168:950): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6570 suid=74 rport=56802 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765868585.168:951): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=6570 suid=74 rport=56802 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765868585.223:952): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765868585.240:953): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765868585.240:954): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:29:9d:95:92:cc:83:72:06:42:ed:10:a4:bb:f5:f1:c1:fd:52:87:f6:ff:80:d7:0b:00:09:15:05:9a:b6:13:82 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765868585.271:955): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765868585.271:956): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6570 suid=74 rport=56802 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765868585.273:957): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765868585.274:958): pid=6569 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=6 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765868585.274:958): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffe29167690 a2=4 a3=3e8 items=0 ppid=1130 pid=6569 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765868585.274:958): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765868585.275:959): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765868585.295:960): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1765868585.297:961): pid=6572 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765868585.339:962): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868585.339:963): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868585.399:964): pid=6586 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868585.400:965): pid=6586 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69706A7A707366706F68666F6479716B70736D74686A686B686A787871776161203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868585.401:966): pid=6586 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868585.405:967): pid=6586 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765868586.175:968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=rhsm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765868589.514:969): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=6656 suid=74 rport=43048 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.103 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765868589.515:970): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=6656 suid=74 rport=43048 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.103 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765868590.127:971): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6656 suid=74 rport=43048 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.103 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765868590.128:972): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=193.46.255.103 addr=193.46.255.103 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765868590.128:973): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.103 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1765868592.078:974): pid=6586 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868592.079:975): pid=6586 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868592.083:976): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868592.083:977): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868599.290:978): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868599.290:979): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868599.492:980): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868599.492:981): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868600.248:982): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868600.248:983): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868600.308:984): pid=6704 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868600.308:985): pid=6704 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72656E746365626E656D706E736E666F6E74707970746E69706267617076696E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868600.311:986): pid=6704 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868600.315:987): pid=6704 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=MAC_CONFIG_CHANGE msg=audit(1765868629.507:988): bool=virt_use_nfs val=1 old_val=0 auid=1000 ses=6AUID="zuul"
type=SYSCALL msg=audit(1765868629.507:988): arch=c000003e syscall=1 success=yes exit=2 a0=4 a1=7ffe0b6c5dce a2=2 a3=0 items=0 ppid=6781 pid=6782 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="setsebool" exe="/usr/sbin/setsebool" subj=unconfined_u:unconfined_r:setsebool_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765868629.507:988): proctitle=2F7573722F7362696E2F7365747365626F6F6C002D50002D4E00766972745F7573655F6E66733D3100766972745F73616E64626F785F7573655F616C6C5F636170733D31
type=MAC_POLICY_LOAD msg=audit(1765868639.448:989): auid=1000 ses=6 lsm=selinux res=1AUID="zuul"
type=SYSCALL msg=audit(1765868639.448:989): arch=c000003e syscall=1 success=yes exit=3537292 a0=4 a1=7fafe6600000 a2=35f98c a3=0 items=0 ppid=6781 pid=6795 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765868639.448:989): proctitle="/usr/sbin/load_policy"
type=SERVICE_START msg=audit(1765868651.735:990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r3edcb9f8734d466b80241706ce39ff3e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765868651.973:991): prog-id=43 op=LOAD
type=BPF msg=audit(1765868651.973:992): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765868651.973:993): prog-id=44 op=LOAD
type=BPF msg=audit(1765868651.973:994): prog-id=45 op=LOAD
type=BPF msg=audit(1765868651.973:995): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765868651.973:996): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765868651.974:997): prog-id=46 op=LOAD
type=BPF msg=audit(1765868651.974:998): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765868651.974:999): prog-id=47 op=LOAD
type=BPF msg=audit(1765868651.974:1000): prog-id=48 op=LOAD
type=BPF msg=audit(1765868651.974:1001): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765868651.974:1002): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765868651.975:1003): prog-id=49 op=LOAD
type=BPF msg=audit(1765868651.975:1004): prog-id=50 op=LOAD
type=BPF msg=audit(1765868651.975:1005): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765868651.975:1006): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765868651.976:1007): prog-id=51 op=LOAD
type=BPF msg=audit(1765868651.976:1008): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765868651.978:1009): prog-id=52 op=LOAD
type=BPF msg=audit(1765868651.978:1010): prog-id=0 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1011): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="container-selinux-3:2.229.0-1.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1012): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-libs-3.10.2-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1013): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="protobuf-c-1.3.3-12.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1014): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnftnl-1.2.2-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1015): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-nft-1.8.8-6.el9_1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1016): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nftables-1:1.0.4-10.el9_1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1017): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="conmon-2:2.1.7-1.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1018): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="aardvark-dns-2:1.5.0-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1019): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="netavark-2:1.5.1-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1020): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="yajl-2.1.0-21.el9_0.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1021): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libnet-1.2-6.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1022): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="criu-3.17-5.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1023): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="criu-libs-3.17-5.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1024): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="crun-1.8.4-1.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1025): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libslirp-4.4.0-7.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1026): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="slirp4netns-1.2.0-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1027): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="shadow-utils-subid-2:4.9-6.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1028): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-common-3.10.2-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1029): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse3-3.10.2-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1030): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fuse-overlayfs-1.11-1.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1031): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="containers-common-2:1-52.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765868652.010:1032): pid=6706 uid=0 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="podman-2:4.4.1-22.el9_2.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=USER_END msg=audit(1765868653.600:1033): pid=6704 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868653.600:1034): pid=6704 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868653.605:1035): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868653.605:1036): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765868659.830:1037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765868659.830:1038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765868659.832:1039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r3edcb9f8734d466b80241706ce39ff3e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765868708.125:1040): pid=18359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18360 suid=74 rport=58730 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.95.115 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765868708.125:1041): pid=18359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18360 suid=74 rport=58730 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.95.115 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765868709.311:1042): pid=18359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18360 suid=74 rport=58730 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.95.115 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765868709.312:1043): pid=18359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.95.115 addr=80.94.95.115 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765868709.312:1044): pid=18359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.94.95.115 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765868711.034:1045): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868711.034:1046): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868711.096:1047): pid=18374 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868711.096:1048): pid=18374 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686D686A696366646C716C66627568796F6C6D7A7A7663716C617962636A7664203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868711.097:1049): pid=18374 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868711.102:1050): pid=18374 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868711.875:1051): pid=18374 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868711.876:1052): pid=18374 uid=1000 auid=1000 ses=6 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868711.880:1053): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868711.880:1054): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868711.922:1055): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868711.922:1056): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868712.828:1057): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868712.828:1058): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765868714.947:1059): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6572 suid=1000 rport=56802 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765868714.950:1060): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765868714.951:1061): pid=6569 uid=0 auid=1000 ses=6 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765868732.136:1062): pid=18438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765868732.140:1063): pid=18439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765868732.142:1064): pid=18437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18444 suid=74 rport=36874 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765868732.142:1065): pid=18437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18444 suid=74 rport=36874 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765868732.151:1066): pid=18437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18444 suid=74 rport=36874 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1765868732.153:1067): pid=18437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765868732.154:1068): pid=18441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18445 suid=74 rport=36884 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765868732.154:1069): pid=18441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18445 suid=74 rport=36884 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765868732.157:1070): pid=18441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18445 suid=74 rport=36884 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1765868732.157:1071): pid=18441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765868732.161:1072): pid=18440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765868737.408:1073): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18448 suid=74 rport=47642 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765868737.409:1074): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18448 suid=74 rport=47642 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765868737.464:1075): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765868737.481:1076): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765868737.481:1077): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:29:9d:95:92:cc:83:72:06:42:ed:10:a4:bb:f5:f1:c1:fd:52:87:f6:ff:80:d7:0b:00:09:15:05:9a:b6:13:82 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765868737.512:1078): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765868737.512:1079): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18448 suid=74 rport=47642 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765868737.515:1080): pid=18447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765868737.515:1081): pid=18447 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=7 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765868737.515:1081): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffff1db1380 a2=4 a3=3e8 items=0 ppid=1130 pid=18447 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765868737.515:1081): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765868737.517:1082): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765868737.535:1083): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1765868737.538:1084): pid=18450 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765868737.581:1085): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868737.581:1086): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868737.827:1087): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868737.827:1088): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868738.459:1089): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868738.459:1090): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868738.520:1091): pid=18478 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868738.520:1092): pid=18478 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746774627769726E6671637A74617A64616E74746A75686C78786A6270687478203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868738.520:1093): pid=18478 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868738.524:1094): pid=18478 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868738.726:1095): pid=18478 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868738.726:1096): pid=18478 uid=1000 auid=1000 ses=7 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868738.730:1097): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868738.730:1098): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765868740.558:1099): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18450 suid=1000 rport=47642 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765868740.560:1100): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765868740.560:1101): pid=18447 uid=0 auid=1000 ses=7 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1765868842.836:1102): pid=18484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18485 suid=74 rport=44278 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765868842.836:1103): pid=18484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18485 suid=74 rport=44278 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765868842.893:1104): pid=18484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765868842.910:1105): pid=18484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765868842.911:1106): pid=18484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:29:9d:95:92:cc:83:72:06:42:ed:10:a4:bb:f5:f1:c1:fd:52:87:f6:ff:80:d7:0b:00:09:15:05:9a:b6:13:82 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765868842.943:1107): pid=18484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765868842.944:1108): pid=18484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18485 suid=74 rport=44278 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765868842.946:1109): pid=18484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765868842.946:1110): pid=18484 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=8 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765868842.946:1110): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd818ef170 a2=4 a3=3e8 items=0 ppid=1130 pid=18484 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765868842.946:1110): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765868842.948:1111): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765868842.962:1112): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1765868842.965:1113): pid=18487 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765868843.007:1114): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868843.007:1115): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868843.064:1116): pid=18501 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868843.064:1117): pid=18501 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637177757A78796478617974706C7079786D757462746D76686873716C667679203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868843.065:1118): pid=18501 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868843.067:1119): pid=18501 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868843.284:1120): pid=18501 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868843.284:1121): pid=18501 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868843.288:1122): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868843.288:1123): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868843.940:1124): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868843.941:1125): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868843.998:1126): pid=18517 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868843.998:1127): pid=18517 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796B6973746B776F6962636F6E73776A6A766272656773756C647873657A6671203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868843.999:1128): pid=18517 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868844.001:1129): pid=18517 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868844.198:1130): pid=18517 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868844.199:1131): pid=18517 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868844.202:1132): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868844.203:1133): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868845.423:1134): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868845.423:1135): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868845.452:1136): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868845.452:1137): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868845.462:1138): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868845.462:1139): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868845.497:1140): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868845.498:1141): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868845.508:1142): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868845.508:1143): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868845.568:1144): pid=18567 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868845.568:1145): pid=18567 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A736B716E6F696A616C6C646E6A647A72677666696362736F6C696169637871203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868845.569:1146): pid=18567 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868845.571:1147): pid=18567 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868845.735:1148): pid=18567 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868845.735:1149): pid=18567 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868845.740:1150): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868845.740:1151): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868845.755:1152): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868845.756:1153): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868845.791:1154): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868845.791:1155): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868845.800:1156): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868845.800:1157): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868845.832:1158): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868845.832:1159): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868845.856:1160): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868845.856:1161): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868845.915:1162): pid=18610 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868845.915:1163): pid=18610 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796F787A6D78747A66627864657374647A68756B726F656966636973766C6D70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868845.916:1164): pid=18610 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868845.919:1165): pid=18610 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868846.092:1166): pid=18610 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868846.093:1167): pid=18610 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868846.097:1168): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868846.098:1169): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868846.131:1170): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868846.131:1171): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868846.163:1172): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868846.163:1173): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868847.051:1174): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868847.052:1175): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868847.083:1176): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868847.083:1177): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868847.096:1178): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868847.096:1179): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868847.132:1180): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868847.132:1181): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868847.145:1182): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868847.145:1183): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868847.204:1184): pid=18672 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868847.204:1185): pid=18672 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736C6E676967626E75646D676E7469656C706E616C6A7A6E746A6D7275776579203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868847.205:1186): pid=18672 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868847.207:1187): pid=18672 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868847.370:1188): pid=18672 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868847.371:1189): pid=18672 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868847.374:1190): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868847.375:1191): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868847.400:1192): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868847.400:1193): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868847.436:1194): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868847.436:1195): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868847.454:1196): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868847.454:1197): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868847.490:1198): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868847.490:1199): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868847.504:1200): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868847.504:1201): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868847.557:1202): pid=18715 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868847.557:1203): pid=18715 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6365797068626D7864696B6B6574616D6F726E7263626C716F6B69626A696B6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868847.557:1204): pid=18715 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868847.560:1205): pid=18715 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868847.707:1206): pid=18715 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868847.707:1207): pid=18715 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868847.711:1208): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868847.712:1209): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868847.725:1210): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868847.725:1211): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868847.758:1212): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868847.758:1213): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868850.040:1214): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868850.041:1215): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765868850.095:1216): pid=18745 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765868850.096:1217): pid=18745 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737A6564637668627375617478696378786564757A616C73656A68716370786A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765868850.096:1218): pid=18745 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765868850.099:1219): pid=18745 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868850.263:1220): pid=18745 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765868850.263:1221): pid=18745 uid=1000 auid=1000 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765868850.267:1222): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868850.267:1223): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868851.015:1224): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868851.015:1225): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868851.046:1226): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868851.046:1227): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868851.056:1228): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868851.057:1229): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868851.092:1230): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868851.092:1231): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868851.103:1232): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868851.103:1233): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868851.305:1234): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868851.305:1235): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868851.319:1236): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868851.319:1237): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868851.525:1238): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868851.525:1239): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868851.540:1240): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868851.540:1241): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868851.571:1242): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868851.571:1243): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868852.438:1244): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868852.439:1245): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868852.467:1246): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868852.467:1247): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868852.476:1248): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868852.476:1249): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868852.509:1250): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868852.510:1251): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868852.522:1252): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868852.522:1253): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868852.724:1254): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868852.724:1255): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868852.739:1256): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868852.739:1257): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868852.942:1258): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868852.943:1259): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868852.965:1260): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868852.966:1261): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868853.000:1262): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868853.001:1263): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868855.160:1264): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868855.161:1265): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868855.189:1266): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868855.190:1267): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868855.198:1268): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868855.198:1269): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868855.233:1270): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868855.233:1271): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868855.243:1272): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868855.243:1273): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868855.443:1274): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868855.443:1275): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868855.459:1276): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868855.459:1277): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868855.652:1278): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868855.652:1279): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765868855.670:1280): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765868855.671:1281): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765868855.700:1282): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765868855.701:1283): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765868856.136:1284): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18487 suid=1000 rport=44278 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765868856.138:1285): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765868856.138:1286): pid=18484 uid=0 auid=1000 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1765868957.368:1287): pid=18980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18981 suid=74 rport=40326 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=115.190.143.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765868957.368:1288): pid=18980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18981 suid=74 rport=40326 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=115.190.143.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765868959.019:1289): pid=18980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18981 suid=74 rport=40326 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=115.190.143.238 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765868959.020:1290): pid=18980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=115.190.143.238 addr=115.190.143.238 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765868959.021:1291): pid=18980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=115.190.143.238 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765869006.721:1292): pid=18982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18983 suid=74 rport=40564 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765869006.721:1293): pid=18982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=18983 suid=74 rport=40564 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765869006.785:1294): pid=18982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765869006.785:1295): pid=18982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:29:9d:95:92:cc:83:72:06:42:ed:10:a4:bb:f5:f1:c1:fd:52:87:f6:ff:80:d7:0b:00:09:15:05:9a:b6:13:82 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765869006.809:1296): pid=18982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.213 addr=38.102.83.213 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765869006.809:1297): pid=18982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18983 suid=74 rport=40564 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765869006.812:1298): pid=18982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.213 addr=38.102.83.213 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765869006.812:1299): pid=18982 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=9 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765869006.812:1299): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffdd82ba4c0 a2=4 a3=3e8 items=0 ppid=1130 pid=18982 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765869006.812:1299): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765869006.813:1300): pid=18982 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.213 addr=38.102.83.213 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765869006.831:1301): pid=18982 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.213 addr=38.102.83.213 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1765869006.834:1302): pid=18985 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.213 addr=38.102.83.213 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765869006.877:1303): pid=18982 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869006.877:1304): pid=18982 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765869006.910:1305): pid=18982 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869006.910:1306): pid=18982 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765869006.928:1307): pid=18982 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869006.928:1308): pid=18982 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765869007.006:1309): pid=18982 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869007.006:1310): pid=18982 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765869007.024:1311): pid=18982 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869007.024:1312): pid=18982 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765869007.206:1313): pid=18982 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869007.206:1314): pid=18982 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765869306.951:1315): pid=18982 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18985 suid=1000 rport=40564 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.213 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765869306.953:1316): pid=18982 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.213 addr=38.102.83.213 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765869306.954:1317): pid=18982 uid=0 auid=1000 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.213 addr=38.102.83.213 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1765869431.464:1318): pid=19032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=19033 suid=74 rport=62988 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.93.119 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765869431.465:1319): pid=19032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=19033 suid=74 rport=62988 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.93.119 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765869432.099:1320): pid=19032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19033 suid=74 rport=62988 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.93.119 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765869432.100:1321): pid=19032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.93.119 addr=80.94.93.119 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765869432.101:1322): pid=19032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=80.94.93.119 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765869676.813:1323): pid=19036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=19037 suid=74 rport=42746 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.103 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765869676.813:1324): pid=19036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=19037 suid=74 rport=42746 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.103 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765869677.448:1325): pid=19036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19037 suid=74 rport=42746 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.103 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765869677.449:1326): pid=19036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=193.46.255.103 addr=193.46.255.103 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765869677.449:1327): pid=19036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.103 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765869729.648:1328): pid=19039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=19040 suid=74 rport=55044 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765869729.648:1329): pid=19039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=19040 suid=74 rport=55044 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765869729.703:1330): pid=19039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765869729.721:1331): pid=19039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765869729.721:1332): pid=19039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:29:9d:95:92:cc:83:72:06:42:ed:10:a4:bb:f5:f1:c1:fd:52:87:f6:ff:80:d7:0b:00:09:15:05:9a:b6:13:82 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765869729.742:1333): pid=19039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765869729.742:1334): pid=19039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19040 suid=74 rport=55044 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765869729.745:1335): pid=19039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765869729.745:1336): pid=19039 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=10 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765869729.745:1336): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffcfc80c140 a2=4 a3=3e8 items=0 ppid=1130 pid=19039 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765869729.745:1336): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765869729.746:1337): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765869729.763:1338): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1765869729.765:1339): pid=19042 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765869729.808:1340): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869729.808:1341): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765869730.009:1342): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869730.009:1343): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765869731.298:1344): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869731.298:1345): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765869731.342:1346): pid=19074 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765869731.342:1347): pid=19074 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6768636F6874706C7774796464787774767361776D6179766C71777265737175203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765869731.343:1348): pid=19074 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765869731.345:1349): pid=19074 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869733.483:1350): pid=19074 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765869733.483:1351): pid=19074 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869733.487:1352): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869733.487:1353): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765869736.395:1354): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869736.395:1355): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765869736.449:1356): pid=19093 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765869736.449:1357): pid=19093 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D697673727671677A6C6B746D70717771756E76656D756D6A6E7874676A786E6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765869736.450:1358): pid=19093 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765869736.453:1359): pid=19093 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869765.118:1360): pid=19093 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765869765.118:1361): pid=19093 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869765.122:1362): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869765.122:1363): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765869796.381:1364): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869796.381:1365): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765869796.439:1366): pid=19251 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765869796.439:1367): pid=19251 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687363666C737376626F676962626A726C6A79787A726779797378766A736C62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765869796.440:1368): pid=19251 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765869796.442:1369): pid=19251 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869801.742:1370): pid=19251 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765869801.743:1371): pid=19251 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869801.747:1372): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869801.747:1373): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765869807.915:1374): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869807.915:1375): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765869807.974:1376): pid=19392 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765869807.975:1377): pid=19392 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D637473796B696172626C6876656A696C67657962626D6F6F6874747869717A63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765869807.975:1378): pid=19392 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765869807.978:1379): pid=19392 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869823.663:1380): pid=19392 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765869823.663:1381): pid=19392 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869823.667:1382): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869823.667:1383): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765869841.136:1384): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869841.136:1385): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765869841.194:1386): pid=19668 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765869841.195:1387): pid=19668 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E65737A787478646F6C6D6E62746266636D787570676D777274627865706F79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765869841.195:1388): pid=19668 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765869841.198:1389): pid=19668 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869856.470:1390): pid=19668 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765869856.470:1391): pid=19668 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869856.474:1392): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869856.475:1393): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765869873.848:1394): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869873.848:1395): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765869873.907:1396): pid=19945 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765869873.907:1397): pid=19945 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72766C6668737870726C6865736E79637668706C69676B71626A6A666E687678203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765869873.909:1398): pid=19945 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765869873.912:1399): pid=19945 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869890.130:1400): pid=19945 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765869890.130:1401): pid=19945 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869890.134:1402): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869890.134:1403): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765869909.174:1404): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869909.174:1405): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765869909.233:1406): pid=20224 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765869909.233:1407): pid=20224 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71737577737A6564736874796A6C776F617070796178666270786C7A6F766473203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765869909.234:1408): pid=20224 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765869909.237:1409): pid=20224 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869911.407:1410): pid=20224 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765869911.408:1411): pid=20224 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869911.412:1412): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869911.412:1413): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765869914.344:1414): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869914.344:1415): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765869914.400:1416): pid=20243 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765869914.400:1417): pid=20243 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6464767366727565687170716E72616F6D6465687A6C6E7A716F777168656974203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765869914.401:1418): pid=20243 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765869914.404:1419): pid=20243 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=ADD_GROUP msg=audit(1765869928.858:1420): pid=20332 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="unbound"
type=GRP_MGMT msg=audit(1765869928.863:1421): pid=20332 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="unbound"
type=ADD_USER msg=audit(1765869928.907:1422): pid=20339 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="unbound" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=MAC_POLICY_LOAD msg=audit(1765869937.703:1423): auid=1000 ses=10 lsm=selinux res=1AUID="zuul"
type=SYSCALL msg=audit(1765869937.703:1423): arch=c000003e syscall=1 success=yes exit=3540283 a0=4 a1=7fa38a400000 a2=36053b a3=0 items=0 ppid=20356 pid=20363 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765869937.703:1423): proctitle="/usr/sbin/load_policy"
type=ADD_GROUP msg=audit(1765869937.878:1424): pid=20366 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=986 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="openvswitch"
type=GRP_MGMT msg=audit(1765869937.883:1425): pid=20366 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=986 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="openvswitch"
type=ADD_USER msg=audit(1765869937.939:1426): pid=20373 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="openvswitch" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=ADD_GROUP msg=audit(1765869938.009:1427): pid=20381 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=985 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="hugetlbfs"
type=GRP_MGMT msg=audit(1765869938.014:1428): pid=20381 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=985 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="hugetlbfs"
type=USER_MGMT msg=audit(1765869938.062:1429): pid=20389 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-group grp="hugetlbfs" acct="openvswitch" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=USER_MGMT msg=audit(1765869938.062:1430): pid=20389 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user-to-shadow-group grp="hugetlbfs" acct="openvswitch" exe="/usr/sbin/usermod" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1765869940.774:1431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r972c912bc20b49b68d860e00d11d3300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765869941.022:1432): prog-id=53 op=LOAD
type=BPF msg=audit(1765869941.022:1433): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765869941.023:1434): prog-id=54 op=LOAD
type=BPF msg=audit(1765869941.023:1435): prog-id=55 op=LOAD
type=BPF msg=audit(1765869941.023:1436): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765869941.023:1437): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765869941.024:1438): prog-id=56 op=LOAD
type=BPF msg=audit(1765869941.024:1439): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765869941.024:1440): prog-id=57 op=LOAD
type=BPF msg=audit(1765869941.024:1441): prog-id=58 op=LOAD
type=BPF msg=audit(1765869941.024:1442): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765869941.024:1443): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765869941.025:1444): prog-id=59 op=LOAD
type=BPF msg=audit(1765869941.025:1445): prog-id=60 op=LOAD
type=BPF msg=audit(1765869941.025:1446): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765869941.025:1447): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765869941.026:1448): prog-id=61 op=LOAD
type=BPF msg=audit(1765869941.026:1449): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765869941.028:1450): prog-id=62 op=LOAD
type=BPF msg=audit(1765869941.028:1451): prog-id=0 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1452): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-netaddr-0.8.0-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1453): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-iso8601-0.1.12-5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1454): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="NetworkManager-config-server-1:1.42.2-32.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1455): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="git-core-2.39.5-1.el9_2.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1456): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pbr-5.5.1-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1457): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="NetworkManager-ovs-1:1.42.2-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1458): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyparsing-2.4.7-9.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1459): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="chkconfig-1.20-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1460): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-packaging-20.9-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1461): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nmstate-libs-2.2.39-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1462): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-libnmstate-2.2.39-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1463): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-zipp-3.4.0-5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1464): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-importlib-metadata-1.7.0-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1465): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-stevedore-3.3.3-17.1.20230621041426.7b48fff.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1466): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-wrapt-1.12.1-6.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1467): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-debtcollector-2.2.0-17.1.20230620164104.649189d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1468): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-rfc3986-1.4.0-7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1469): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-anyjson-0.3.3-26.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1470): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyroute2-0.6.6-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1471): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-utils-lang-4.8.2-17.1.20230621020317.a38b56a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1472): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-i18n-lang-5.0.1-17.1.20230621104020.73187bd.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1473): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-i18n-5.0.1-17.1.20230621104020.73187bd.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1474): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-config-2:8.5.1-17.1.20230621105008.de1dbee.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1475): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-utils-4.8.2-17.1.20230621020317.a38b56a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1476): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-concurrency-lang-4.4.0-17.1.20230620204443.7dcf9e9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1477): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-fasteners-0.14.1-24.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1478): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-concurrency-4.4.0-17.1.20230620204443.7dcf9e9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1479): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nmstate-2.2.39-3.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1480): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="unbound-libs-1.16.2-3.el9_2.4.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1481): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nispor-1.2.10-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1482): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mstflint-4.23.0-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1483): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sshpass-1.09-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1484): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-greenlet-1.1.2-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1485): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openvswitch-selinux-extra-policy-1.0-39.el9fdp.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1486): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openvswitch3.3-3.3.6-141.el9fdp.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1487): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-ply-3.11-14.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1488): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pycparser-2.20-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1489): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cffi-1.14.5-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1490): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cryptography-36.0.1-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1491): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-eventlet-0.30.2-6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1492): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bc-1.07.1-14.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1493): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="initscripts-rename-device-10.11.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1494): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="initscripts-10.11.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1495): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-network-scripts-10.11.1-9.17_1.1.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1496): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-network-scripts-openvswitch3.3-10.11.1-9.17_1.1.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1497): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rhosp-network-scripts-openvswitch-3.3-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1498): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rhosp-openvswitch-3.3-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.061:1499): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-net-config-14.2.1-17.1.20250909160825.61d7bd7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765869941.062:1500): pid=20245 uid=0 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-ansible-core-2.14.2-4.7.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1765869941.744:1501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765869941.744:1502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765869941.748:1503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r972c912bc20b49b68d860e00d11d3300 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765869942.429:1504): pid=20243 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765869942.430:1505): pid=20243 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869942.435:1506): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869942.435:1507): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765869971.313:1508): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869971.313:1509): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765869971.375:1510): pid=21452 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765869971.376:1511): pid=21452 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F646D75726C646F6B74687066796D6A627170777A797476706A6373616F6A64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765869971.377:1512): pid=21452 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765869971.381:1513): pid=21452 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869982.206:1514): pid=21452 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765869982.207:1515): pid=21452 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869982.211:1516): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869982.211:1517): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765869997.611:1518): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869997.612:1519): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765869997.673:1520): pid=21472 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765869997.673:1521): pid=21472 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6575687A726F6C756864797067736D70777676626C6C6762786C786D6762696C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765869997.674:1522): pid=21472 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765869997.677:1523): pid=21472 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869997.855:1524): pid=21472 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765869997.855:1525): pid=21472 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869997.859:1526): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869997.859:1527): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765869998.290:1528): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869998.290:1529): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765869998.320:1530): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869998.320:1531): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765869998.329:1532): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869998.329:1533): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765869998.366:1534): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869998.366:1535): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765869998.477:1536): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869998.477:1537): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765869998.536:1538): pid=21520 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765869998.537:1539): pid=21520 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786D7A6E6F6C7165726B65786B7864626E757A7476766A716579777970627177203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765869998.537:1540): pid=21520 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765869998.540:1541): pid=21520 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869998.695:1542): pid=21520 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765869998.696:1543): pid=21520 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869998.700:1544): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869998.700:1545): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765869998.719:1546): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869998.719:1547): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765869998.756:1548): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869998.756:1549): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765869998.767:1550): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869998.767:1551): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765869998.797:1552): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869998.797:1553): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765869998.922:1554): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869998.922:1555): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765869998.980:1556): pid=21563 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765869998.981:1557): pid=21563 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61746B716869696B797965707079656571756B6C72736C7775717868627A6268203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765869998.981:1558): pid=21563 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765869998.984:1559): pid=21563 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869999.154:1560): pid=21563 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765869999.154:1561): pid=21563 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765869999.158:1562): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869999.158:1563): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765869999.172:1564): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765869999.172:1565): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765869999.201:1566): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765869999.201:1567): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870000.772:1568): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870000.772:1569): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765870000.823:1570): pid=21593 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765870000.823:1571): pid=21593 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64687A78646F66786B636C786B657775636B6C666F72647879717A657A70766E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765870000.824:1572): pid=21593 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765870000.825:1573): pid=21593 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870000.995:1574): pid=21593 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765870000.996:1575): pid=21593 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870001.002:1576): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870001.002:1577): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870001.029:1578): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870001.029:1579): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765870001.076:1580): pid=21614 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765870001.076:1581): pid=21614 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7478676F6A777A6963786F636E64696C75616D796F6F707974797077727A6366203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765870001.076:1582): pid=21614 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765870001.078:1583): pid=21614 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870001.291:1584): pid=21614 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765870001.291:1585): pid=21614 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870001.296:1586): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870001.296:1587): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870001.332:1588): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870001.332:1589): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765870001.390:1590): pid=21634 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765870001.390:1591): pid=21634 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657165736D6165617667636E64736161626F6E66767A676667797869776D7768203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765870001.391:1592): pid=21634 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765870001.394:1593): pid=21634 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870001.593:1594): pid=21634 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765870001.594:1595): pid=21634 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870001.597:1596): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870001.597:1597): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870001.628:1598): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870001.628:1599): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765870001.687:1600): pid=21654 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765870001.687:1601): pid=21654 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666364616F6675637A7563777A7778766D626F66687A6C616763746377676562203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765870001.688:1602): pid=21654 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765870001.690:1603): pid=21654 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870001.888:1604): pid=21654 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765870001.888:1605): pid=21654 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870001.892:1606): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870001.892:1607): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870001.912:1608): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870001.913:1609): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765870001.972:1610): pid=21674 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765870001.972:1611): pid=21674 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67637A76756B767274656A626F67647162726862666A7079756B616F666E6177203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765870001.973:1612): pid=21674 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765870001.975:1613): pid=21674 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870002.170:1614): pid=21674 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765870002.171:1615): pid=21674 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870002.174:1616): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870002.174:1617): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870005.233:1618): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870005.233:1619): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765870005.291:1620): pid=21694 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765870005.291:1621): pid=21694 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65687570797077646A6F76626D626B636F7A636E767972756F6261756E77616D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765870005.292:1622): pid=21694 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765870005.295:1623): pid=21694 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765870006.001:1624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=network comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765870006.028:1625): pid=21694 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765870006.028:1626): pid=21694 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870006.038:1627): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870006.038:1628): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870006.066:1629): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870006.066:1630): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765870006.128:1631): pid=21868 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765870006.129:1632): pid=21868 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687A7777626E6568667065656B6E68657779786C6F61756A677878766F697672203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765870006.130:1633): pid=21868 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765870006.134:1634): pid=21868 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765870006.764:1635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovsdb-server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765870006.789:1636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovs-delete-transient-ports comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765870007.031:1637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ovs-vswitchd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765870007.036:1638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=openvswitch comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765870007.067:1639): pid=21868 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765870007.067:1640): pid=21868 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870007.072:1641): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870007.072:1642): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870009.407:1643): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870009.407:1644): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765870009.470:1645): pid=22033 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765870009.470:1646): pid=22033 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E61707A76767075746F756C6B7961696873766B7674766475676A6375797066203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765870009.471:1647): pid=22033 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765870009.475:1648): pid=22033 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=ANOM_PROMISCUOUS msg=audit(1765870010.596:1649): dev=ovs-system prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1765870010.596:1649): arch=c000003e syscall=46 success=yes exit=56 a0=15 a1=7ffde1169e30 a2=0 a3=0 items=0 ppid=1 pid=22009 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1765870010.596:1649): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1765870010.637:1650): dev=br-ex prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1765870010.637:1650): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7ffde1169e10 a2=0 a3=0 items=0 ppid=1 pid=22009 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1765870010.637:1650): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_START msg=audit(1765870013.907:1651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765870016.122:1652): dev=eth1 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1765870016.122:1652): arch=c000003e syscall=46 success=yes exit=52 a0=19 a1=7ffde1169e10 a2=0 a3=0 items=0 ppid=1 pid=22009 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1765870016.122:1652): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1765870016.290:1653): dev=vlan22 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1765870016.290:1653): arch=c000003e syscall=46 success=yes exit=52 a0=19 a1=7ffde1169e10 a2=0 a3=0 items=0 ppid=1 pid=22009 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1765870016.290:1653): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1765870019.602:1654): dev=vlan20 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1765870019.602:1654): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7ffde1169e10 a2=0 a3=0 items=0 ppid=1 pid=22009 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1765870019.602:1654): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1765870022.875:1655): dev=vlan21 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1765870022.875:1655): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7ffde1169e10 a2=0 a3=0 items=0 ppid=1 pid=22009 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1765870022.875:1655): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=SERVICE_STOP msg=audit(1765870023.946:1656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=ANOM_PROMISCUOUS msg=audit(1765870026.173:1657): dev=vlan23 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1765870026.173:1657): arch=c000003e syscall=46 success=yes exit=52 a0=34 a1=7ffde1169e10 a2=0 a3=0 items=0 ppid=1 pid=22009 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1765870026.173:1657): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=ANOM_PROMISCUOUS msg=audit(1765870029.480:1658): dev=vlan44 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1765870029.480:1658): arch=c000003e syscall=46 success=yes exit=52 a0=34 a1=7ffde1169e10 a2=0 a3=0 items=0 ppid=1 pid=22009 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1765870029.480:1658): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=USER_END msg=audit(1765870039.070:1659): pid=22033 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765870039.070:1660): pid=22033 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870039.075:1661): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870039.075:1662): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870091.842:1663): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870091.842:1664): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765870094.077:1665): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870094.077:1666): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870097.745:1667): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870097.745:1668): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765870098.008:1669): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870098.008:1670): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870098.053:1671): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870098.053:1672): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765870098.104:1673): pid=23322 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765870098.104:1674): pid=23322 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7063646A73786C777472777574617365787A7561796E6E6F77767967726A6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765870098.105:1675): pid=23322 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765870098.110:1676): pid=23322 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870098.344:1677): pid=23322 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765870098.344:1678): pid=23322 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870098.348:1679): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870098.348:1680): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870099.641:1681): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870099.641:1682): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765870099.924:1683): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870099.924:1684): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870099.947:1685): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870099.947:1686): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765870099.993:1687): pid=23352 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765870099.993:1688): pid=23352 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756F736479797874796B617368756A706468636D627A6B686A7A6E776673796E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765870099.994:1689): pid=23352 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765870099.996:1690): pid=23352 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870100.228:1691): pid=23352 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765870100.228:1692): pid=23352 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870100.232:1693): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870100.232:1694): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870101.026:1695): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870101.026:1696): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765870101.221:1697): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870101.221:1698): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870101.798:1699): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870101.798:1700): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765870102.000:1701): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870102.000:1702): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870102.587:1703): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870102.587:1704): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765870102.645:1705): pid=23401 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765870102.646:1706): pid=23401 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72727762627675716B62786F6377686464637A757A63726F776B6D797774646B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765870102.646:1707): pid=23401 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765870102.648:1708): pid=23401 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=BPF msg=audit(1765870102.816:1709): prog-id=63 op=LOAD
type=BPF msg=audit(1765870102.816:1710): prog-id=64 op=LOAD
type=SERVICE_START msg=audit(1765870102.890:1711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765870102.911:1712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765870102.916:1713): pid=23401 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765870102.917:1714): pid=23401 uid=1000 auid=1000 ses=10 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870102.920:1715): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870102.920:1716): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765870104.280:1717): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19042 suid=1000 rport=55044 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765870104.284:1718): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765870104.284:1719): pid=19039 uid=0 auid=1000 ses=10 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1765870107.164:1720): pid=23418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23419 suid=74 rport=35334 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765870107.164:1721): pid=23418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23419 suid=74 rport=35334 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765870107.220:1722): pid=23418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765870107.238:1723): pid=23418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765870107.238:1724): pid=23418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:29:9d:95:92:cc:83:72:06:42:ed:10:a4:bb:f5:f1:c1:fd:52:87:f6:ff:80:d7:0b:00:09:15:05:9a:b6:13:82 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765870107.268:1725): pid=23418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765870107.268:1726): pid=23418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23419 suid=74 rport=35334 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765870107.270:1727): pid=23418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765870107.270:1728): pid=23418 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=11 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765870107.270:1728): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff179b0260 a2=4 a3=3e8 items=0 ppid=1130 pid=23418 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765870107.270:1728): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765870107.271:1729): pid=23418 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765870107.287:1730): pid=23418 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1765870107.289:1731): pid=23421 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765870107.331:1732): pid=23418 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870107.331:1733): pid=23418 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765870107.522:1734): pid=23418 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870107.522:1735): pid=23418 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765870109.295:1736): pid=23418 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23421 suid=1000 rport=35334 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765870109.297:1737): pid=23418 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765870109.298:1738): pid=23418 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=SERVICE_STOP msg=audit(1765870112.939:1739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765870132.928:1740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765870132.980:1741): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765870132.980:1742): prog-id=0 op=UNLOAD
type=CRYPTO_SESSION msg=audit(1765870199.245:1743): pid=23441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23442 suid=74 rport=36834 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765870199.245:1744): pid=23441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=23442 suid=74 rport=36834 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765870199.302:1745): pid=23441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765870199.319:1746): pid=23441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765870199.319:1747): pid=23441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:29:9d:95:92:cc:83:72:06:42:ed:10:a4:bb:f5:f1:c1:fd:52:87:f6:ff:80:d7:0b:00:09:15:05:9a:b6:13:82 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765870199.349:1748): pid=23441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765870199.350:1749): pid=23441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23442 suid=74 rport=36834 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765870199.352:1750): pid=23441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765870199.352:1751): pid=23441 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=12 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765870199.352:1751): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd618da290 a2=4 a3=3e8 items=0 ppid=1130 pid=23441 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765870199.352:1751): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765870199.353:1752): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765870199.370:1753): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1765870199.373:1754): pid=23444 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765870199.416:1755): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870199.416:1756): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765870199.480:1757): pid=23458 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765870199.480:1758): pid=23458 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6676696679776E77766E6B6B707367786D707268766E706E72707670706D757A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765870199.482:1759): pid=23458 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765870199.486:1760): pid=23458 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=ADD_GROUP msg=audit(1765870205.910:1761): pid=23523 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=984 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="printadmin"
type=GRP_MGMT msg=audit(1765870205.915:1762): pid=23523 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=984 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="printadmin"
type=BPF msg=audit(1765870206.828:1763): prog-id=65 op=LOAD
type=BPF msg=audit(1765870206.828:1764): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765870206.828:1765): prog-id=66 op=LOAD
type=BPF msg=audit(1765870206.828:1766): prog-id=67 op=LOAD
type=BPF msg=audit(1765870206.828:1767): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765870206.828:1768): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765870206.829:1769): prog-id=68 op=LOAD
type=BPF msg=audit(1765870206.829:1770): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765870206.829:1771): prog-id=69 op=LOAD
type=BPF msg=audit(1765870206.830:1772): prog-id=70 op=LOAD
type=BPF msg=audit(1765870206.830:1773): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765870206.830:1774): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765870206.830:1775): prog-id=71 op=LOAD
type=BPF msg=audit(1765870206.830:1776): prog-id=72 op=LOAD
type=BPF msg=audit(1765870206.830:1777): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765870206.830:1778): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765870206.831:1779): prog-id=73 op=LOAD
type=BPF msg=audit(1765870206.831:1780): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765870206.833:1781): prog-id=74 op=LOAD
type=BPF msg=audit(1765870206.833:1782): prog-id=0 op=UNLOAD
type=MAC_POLICY_LOAD msg=audit(1765870215.432:1783): auid=1000 ses=12 lsm=selinux res=1AUID="zuul"
type=SYSCALL msg=audit(1765870215.432:1783): arch=c000003e syscall=1 success=yes exit=3577633 a0=4 a1=7fc94d400000 a2=369721 a3=0 items=0 ppid=23576 pid=23584 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765870215.432:1783): proctitle="/usr/sbin/load_policy"
type=SERVICE_STOP msg=audit(1765870216.821:1784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765870216.843:1785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765870217.895:1786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r90ed5046b8a54ac7bd8592da7846dbea comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765870218.153:1787): prog-id=75 op=LOAD
type=BPF msg=audit(1765870218.154:1788): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765870218.154:1789): prog-id=76 op=LOAD
type=BPF msg=audit(1765870218.154:1790): prog-id=77 op=LOAD
type=BPF msg=audit(1765870218.154:1791): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765870218.154:1792): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765870218.155:1793): prog-id=78 op=LOAD
type=BPF msg=audit(1765870218.155:1794): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765870218.155:1795): prog-id=79 op=LOAD
type=BPF msg=audit(1765870218.155:1796): prog-id=80 op=LOAD
type=BPF msg=audit(1765870218.155:1797): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765870218.155:1798): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765870218.156:1799): prog-id=81 op=LOAD
type=BPF msg=audit(1765870218.156:1800): prog-id=82 op=LOAD
type=BPF msg=audit(1765870218.156:1801): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765870218.156:1802): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765870218.157:1803): prog-id=83 op=LOAD
type=BPF msg=audit(1765870218.157:1804): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765870218.159:1805): prog-id=84 op=LOAD
type=BPF msg=audit(1765870218.159:1806): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765870218.211:1807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rb779ac2a90bc414f88c041c4b9a9220e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1765870218.239:1808): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssl-libs-1:3.0.7-18.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.239:1809): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="krb5-libs-1.20.1-9.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.239:1810): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nspr-4.35.0-17.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.239:1811): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-util-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.240:1812): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyasn1-0.4.8-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.240:1813): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyasn1-modules-0.4.8-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.240:1814): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-ldap-3.4.3-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.240:1815): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="cyrus-sasl-gssapi-2.1.27-21.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.240:1816): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-gssapi-1.6.9-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.240:1817): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="krb5-pkinit-1.20.1-9.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.240:1818): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="samba-common-0:4.17.5-105.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.240:1819): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ipa-client-common-4.10.1-12.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.240:1820): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="augeas-libs-1.13.0-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.240:1821): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-qrcode-core-6.1-12.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.240:1822): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyusb-1.0.2-13.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.241:1823): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-sssdconfig-2.8.2-2.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.241:1824): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-dns-2.2.1-2.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.241:1825): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libipa_hbac-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.241:1826): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-libipa_hbac-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.241:1827): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-yubico-1.3.3-7.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.241:1828): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-augeas-0.5.0-25.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.241:1829): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sssd-krb5-common-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.241:1830): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-softokn-freebl-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.241:1831): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-softokn-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.242:1832): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.242:1833): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-sysinit-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.242:1834): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="certmonger-0.79.17-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.242:1835): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="nss-tools-3.101.0-10.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.242:1836): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="autofs-1:5.1.7-36.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.242:1837): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libkadm5-1.20.1-9.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.242:1838): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="krb5-workstation-1.20.1-9.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.242:1839): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-sss-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.242:1840): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libjose-11-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.243:1841): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sssd-idp-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.243:1842): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-sss-murmur-2.8.2-5.el9_2.5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.243:1843): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-license-32:9.16.23-11.el9_2.8.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.243:1844): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ipa-selinux-4.10.1-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.243:1845): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ipa-common-4.10.1-12.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.243:1846): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-jwcrypto-0.8-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.243:1847): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-ipalib-4.10.1-12.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.243:1848): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-ipaclient-4.10.1-12.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.243:1849): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libuv-1:1.42.0-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.243:1850): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="fstrm-0.6.1-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.244:1851): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-libs-32:9.16.23-11.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.244:1852): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="bind-utils-32:9.16.23-11.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.244:1853): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sssd-dbus-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.244:1854): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sssd-tools-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.244:1855): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libsss_autofs-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.244:1856): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="avahi-libs-0.8-12.el9_2.1.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.244:1857): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libwbclient-0:4.17.5-105.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.244:1858): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="samba-common-libs-0:4.17.5-105.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.244:1859): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="samba-client-libs-0:4.17.5-105.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.244:1860): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sssd-common-pac-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.244:1861): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sssd-ipa-2.8.2-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.244:1862): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ipa-client-4.10.1-12.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SOFTWARE_UPDATE msg=audit(1765870218.244:1863): pid=23460 uid=0 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="openssl-1:3.0.7-18.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1765870219.298:1864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765870219.298:1865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765870219.301:1866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r90ed5046b8a54ac7bd8592da7846dbea comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765870219.302:1867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-rb779ac2a90bc414f88c041c4b9a9220e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765870219.443:1868): pid=23458 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765870219.443:1869): pid=23458 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870219.449:1870): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870219.449:1871): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870264.110:1872): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870264.110:1873): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765870264.140:1874): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870264.141:1875): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870264.152:1876): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870264.153:1877): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765870264.187:1878): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870264.187:1879): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870264.204:1880): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870264.204:1881): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765870264.264:1882): pid=25605 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765870264.264:1883): pid=25605 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7073746A7566617372786B696E76786F786C616963726962717168756476696B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765870264.265:1884): pid=25605 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765870264.271:1885): pid=25605 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870264.451:1886): pid=25605 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765870264.451:1887): pid=25605 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870264.456:1888): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870264.456:1889): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870264.477:1890): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870264.477:1891): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765870264.510:1892): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870264.510:1893): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870264.531:1894): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870264.531:1895): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765870264.560:1896): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870264.561:1897): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870264.575:1898): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870264.575:1899): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765870264.634:1900): pid=25650 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765870264.634:1901): pid=25650 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65796871786B7075787261767973666663716D71726C626E646766656E687A76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765870264.635:1902): pid=25650 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765870264.637:1903): pid=25650 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870264.814:1904): pid=25650 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765870264.814:1905): pid=25650 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870264.819:1906): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870264.819:1907): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870264.832:1908): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870264.832:1909): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765870264.858:1910): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870264.858:1911): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870267.054:1912): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870267.054:1913): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765870267.115:1914): pid=25680 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765870267.115:1915): pid=25680 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A697378787876727768786976746B7A676A71717672686461727A6C716B6369203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765870267.116:1916): pid=25680 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765870267.118:1917): pid=25680 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870267.297:1918): pid=25680 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765870267.297:1919): pid=25680 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870267.301:1920): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870267.301:1921): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765870268.976:1922): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765870268.977:1923): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765870269.036:1924): pid=25698 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765870269.037:1925): pid=25698 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7973787875777A6E6670756B6175727967757676786C6F67777167666E647177203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765870269.037:1926): pid=25698 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765870269.039:1927): pid=25698 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870269.226:1928): pid=25698 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765870269.227:1929): pid=25698 uid=1000 auid=1000 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765870269.231:1930): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765870269.231:1931): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765870329.254:1932): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23444 suid=1000 rport=36834 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765870329.256:1933): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765870329.257:1934): pid=23441 uid=0 auid=1000 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_SESSION msg=audit(1765870655.566:1935): pid=25702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=25703 suid=74 rport=30029 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.93.119 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765870655.566:1936): pid=25702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=25703 suid=74 rport=30029 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.93.119 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765870656.201:1937): pid=25702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25703 suid=74 rport=30029 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=80.94.93.119 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765870656.202:1938): pid=25702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=80.94.93.119 addr=80.94.93.119 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765870656.202:1939): pid=25702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=80.94.93.119 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765870826.699:1940): pid=25704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=25705 suid=74 rport=13852 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.159 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765870826.699:1941): pid=25704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=25705 suid=74 rport=13852 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.159 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765870827.334:1942): pid=25704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25705 suid=74 rport=13852 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.159 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765870827.335:1943): pid=25704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=193.46.255.159 addr=193.46.255.159 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765870827.335:1944): pid=25704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.159 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765871879.383:1945): pid=25892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=25893 suid=74 rport=20968 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.244 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765871879.383:1946): pid=25892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=25893 suid=74 rport=20968 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.244 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765871879.997:1947): pid=25892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25893 suid=74 rport=20968 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.244 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765871879.998:1948): pid=25892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=193.46.255.244 addr=193.46.255.244 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765871879.998:1949): pid=25892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.244 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765871893.777:1950): pid=25896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=25897 suid=74 rport=35796 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765871893.777:1951): pid=25896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=25897 suid=74 rport=35796 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765871894.414:1952): pid=25896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25897 suid=74 rport=35796 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765871894.415:1953): pid=25896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=193.46.255.217 addr=193.46.255.217 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765871894.416:1954): pid=25896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765871937.745:1955): pid=25898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=25899 suid=74 rport=34804 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765871937.745:1956): pid=25898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=25899 suid=74 rport=34804 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765871937.817:1957): pid=25898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765871937.817:1958): pid=25898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:29:9d:95:92:cc:83:72:06:42:ed:10:a4:bb:f5:f1:c1:fd:52:87:f6:ff:80:d7:0b:00:09:15:05:9a:b6:13:82 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765871937.848:1959): pid=25898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765871937.849:1960): pid=25898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25899 suid=74 rport=34804 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765871937.850:1961): pid=25898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765871937.850:1962): pid=25898 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=13 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765871937.850:1962): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd641a8a60 a2=4 a3=3e8 items=0 ppid=23596 pid=25898 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765871937.850:1962): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765871937.851:1963): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765871937.872:1964): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_ACQ msg=audit(1765871937.874:1965): pid=25901 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765871937.919:1966): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765871937.919:1967): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765871937.954:1968): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765871937.954:1969): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765871937.996:1970): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765871937.996:1971): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765871938.083:1972): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765871938.083:1973): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765871938.109:1974): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765871938.109:1975): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765871938.164:1976): pid=25944 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765871938.164:1977): pid=25944 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79686D6477786D6961766E63756E76776E637477646D657A69626C78777A6876203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765871938.166:1978): pid=25944 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765871938.171:1979): pid=25944 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765871938.330:1980): pid=25944 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765871938.330:1981): pid=25944 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765871938.333:1982): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765871938.333:1983): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765871938.650:1984): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765871938.650:1985): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765871938.710:1986): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765871938.710:1987): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765871938.751:1988): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765871938.751:1989): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765871938.851:1990): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765871938.851:1991): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765871938.882:1992): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765871938.882:1993): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765871938.941:1994): pid=25989 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765871938.941:1995): pid=25989 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696371656E767071696E61626862746E706A65696F6762656F717A6D7A6D746E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765871938.942:1996): pid=25989 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765871938.944:1997): pid=25989 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765871939.243:1998): pid=25989 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765871939.243:1999): pid=25989 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765871939.247:2000): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765871939.247:2001): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765871939.436:2002): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765871939.436:2003): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765871939.492:2004): pid=26009 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765871939.492:2005): pid=26009 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617464747A72667A697365677A7369776F6869736463727877627061786B6568203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765871939.493:2006): pid=26009 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765871939.495:2007): pid=26009 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=ADD_GROUP msg=audit(1765871939.708:2008): pid=26013 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-group acct="tripleo-admin" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=ADD_USER msg=audit(1765871939.714:2009): pid=26013 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user acct="tripleo-admin" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=USER_MGMT msg=audit(1765871939.776:2010): pid=26013 uid=0 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-home-dir id=1002 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" ID="tripleo-admin"
type=USER_END msg=audit(1765871939.809:2011): pid=26009 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765871939.809:2012): pid=26009 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765871939.813:2013): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765871939.813:2014): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765871939.986:2015): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765871939.986:2016): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765871940.018:2017): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765871940.018:2018): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765871940.059:2019): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765871940.059:2020): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765871940.094:2021): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765871940.095:2022): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765871940.136:2023): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765871940.136:2024): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765871940.197:2025): pid=26066 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765871940.197:2026): pid=26066 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6878636C6571707A68756A646B7667796176726261677A6E7563656A6A716B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765871940.198:2027): pid=26066 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765871940.200:2028): pid=26066 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765871940.373:2029): pid=26066 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765871940.374:2030): pid=26066 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765871940.377:2031): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765871940.378:2032): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765871940.421:2033): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765871940.421:2034): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765871940.460:2035): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765871940.461:2036): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765871940.502:2037): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765871940.502:2038): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765871940.533:2039): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765871940.534:2040): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765871940.575:2041): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765871940.575:2042): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765871940.634:2043): pid=26109 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765871940.634:2044): pid=26109 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6577766A746E7964646767746D63777579626D696D676A6D766A6A6661666979203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765871940.635:2045): pid=26109 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765871940.637:2046): pid=26109 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765871940.820:2047): pid=26109 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765871940.821:2048): pid=26109 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765871940.824:2049): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765871940.824:2050): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765871940.866:2051): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765871940.866:2052): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765871940.896:2053): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765871940.896:2054): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765871941.033:2055): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765871941.033:2056): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765871941.087:2057): pid=26139 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765871941.087:2058): pid=26139 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616275667568687973686863776671626C6B687A7665687A7767667477647774203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765871941.089:2059): pid=26139 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765871941.092:2060): pid=26139 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765871941.275:2061): pid=26139 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765871941.276:2062): pid=26139 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765871941.280:2063): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765871941.280:2064): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765871941.428:2065): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765871941.429:2066): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765871941.473:2067): pid=26155 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765871941.473:2068): pid=26155 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C73737876786A726F736B6467746467796C756A78667A627A75777468626A62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765871941.474:2069): pid=26155 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765871941.475:2070): pid=26155 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765871941.619:2071): pid=26155 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765871941.620:2072): pid=26155 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765871941.623:2073): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765871941.623:2074): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765871941.813:2075): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765871941.814:2076): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765871941.869:2077): pid=26171 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765871941.869:2078): pid=26171 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716D65646F7273716B78687A616F7A6B6B7A6F706B7A646C6C706D616C786C69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765871941.870:2079): pid=26171 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765871941.872:2080): pid=26171 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765871942.046:2081): pid=26171 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765871942.046:2082): pid=26171 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765871942.050:2083): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765871942.050:2084): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765871942.589:2085): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765871942.589:2086): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_ACCT msg=audit(1765871942.652:2087): pid=26187 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765871942.652:2088): pid=26187 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75636D6A646B6F7464747367786E687A77646B686765697A637067776375666B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765871942.653:2089): pid=26187 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765871942.655:2090): pid=26187 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765871942.826:2091): pid=26187 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765871942.827:2092): pid=26187 uid=1000 auid=1000 ses=13 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765871942.831:2093): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765871942.831:2094): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765871943.332:2095): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765871943.333:2096): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_END msg=audit(1765871943.524:2097): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765871943.524:2098): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_SESSION msg=audit(1765871954.541:2099): pid=26204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26205 suid=74 rport=45942 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765871954.541:2100): pid=26204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=ecdh-sha2-nistp256 spid=26205 suid=74 rport=45942 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765871954.602:2101): pid=26204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765871954.602:2102): pid=26204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:29:9d:95:92:cc:83:72:06:42:ed:10:a4:bb:f5:f1:c1:fd:52:87:f6:ff:80:d7:0b:00:09:15:05:9a:b6:13:82 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765871954.631:2103): pid=26204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765871954.631:2104): pid=26204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26205 suid=74 rport=45942 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765871954.633:2105): pid=26204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765871954.633:2106): pid=26204 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=14 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin"
type=SYSCALL msg=audit(1765871954.633:2106): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd8e2ae5a0 a2=4 a3=3ea items=0 ppid=23596 pid=26204 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765871954.633:2106): proctitle=737368643A20747269706C656F2D61646D696E205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765871954.635:2107): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765871954.667:2108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765871954.699:2109): pid=26208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1765871954.699:2110): pid=26208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1765871954.700:2111): pid=26208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765871954.701:2112): pid=26208 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1002 tty=(none) old-ses=4294967295 ses=15 res=1UID="root" OLD-AUID="unset" AUID="tripleo-admin"
type=SYSCALL msg=audit(1765871954.701:2112): arch=c000003e syscall=1 success=yes exit=4 a0=7 a1=7ffe54545d80 a2=4 a3=3ea items=0 ppid=1 pid=26208 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765871954.701:2112): proctitle="(systemd)"
type=USER_START msg=audit(1765871954.702:2113): pid=26208 uid=0 auid=1002 ses=15 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="tripleo-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765871954.822:2114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765871954.832:2115): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRED_ACQ msg=audit(1765871954.835:2116): pid=26224 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=USER_LOGIN msg=audit(1765871954.878:2117): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765871954.879:2118): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765871954.910:2119): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765871954.910:2120): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765871954.953:2121): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765871954.953:2122): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765871955.034:2123): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765871955.034:2124): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765871955.076:2125): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765871955.076:2126): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765871955.134:2127): pid=26267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765871955.135:2128): pid=26267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68796E6F6B7564616A71697061616C77706677716A6461776975676770646A62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765871955.136:2129): pid=26267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765871955.139:2130): pid=26267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871955.439:2131): pid=26267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765871955.439:2132): pid=26267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871955.443:2133): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765871955.443:2134): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765871959.598:2135): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765871959.598:2136): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765871959.648:2137): pid=26287 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765871959.648:2138): pid=26287 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696E746D736273757472707A7A617A69726E686F696B676A74796B6A6A6B6378203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765871959.649:2139): pid=26287 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765871959.652:2140): pid=26287 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871959.876:2141): pid=26287 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765871959.877:2142): pid=26287 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871959.881:2143): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765871959.881:2144): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765871960.456:2145): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765871960.456:2146): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765871960.513:2147): pid=26303 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765871960.514:2148): pid=26303 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70676D646C646565646B6A6A6C6C726F7770716676637A6D727A7A62736A6176203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765871960.514:2149): pid=26303 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765871960.517:2150): pid=26303 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871960.676:2151): pid=26303 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765871960.676:2152): pid=26303 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871960.680:2153): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765871960.680:2154): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765871960.870:2155): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765871960.871:2156): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765871960.901:2157): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765871960.901:2158): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765871960.943:2159): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765871960.943:2160): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765871960.981:2161): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765871960.981:2162): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765871961.023:2163): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765871961.023:2164): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765871961.071:2165): pid=26351 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765871961.071:2166): pid=26351 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B64636F6A6A776E7763676F6A77726C7A63636B766C69736F67767A647A6C72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765871961.072:2167): pid=26351 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765871961.074:2168): pid=26351 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871961.259:2169): pid=26351 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765871961.260:2170): pid=26351 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871961.264:2171): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765871961.265:2172): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765871961.307:2173): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765871961.307:2174): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765871961.337:2175): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765871961.337:2176): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765871961.520:2177): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765871961.520:2178): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765871961.581:2179): pid=26381 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765871961.581:2180): pid=26381 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A63646F6E7571677370696E61656A696E79626F636662727362716F6C6D686D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765871961.582:2181): pid=26381 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765871961.584:2182): pid=26381 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871961.764:2183): pid=26381 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765871961.765:2184): pid=26381 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871961.770:2185): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765871961.770:2186): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765871962.474:2187): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765871962.474:2188): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765871962.534:2189): pid=26397 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765871962.535:2190): pid=26397 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78766768787677727A70757A777A7261797A6E6D646F6C7A70686F746D78686B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765871962.535:2191): pid=26397 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765871962.538:2192): pid=26397 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871962.705:2193): pid=26397 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765871962.705:2194): pid=26397 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871962.711:2195): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765871962.711:2196): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765871962.936:2197): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765871962.936:2198): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765871962.996:2199): pid=26413 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765871962.996:2200): pid=26413 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67726E696B6F797A6E61626B7666796974706D706C63656C75707978636B706E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765871962.997:2201): pid=26413 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765871962.999:2202): pid=26413 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871963.184:2203): pid=26413 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765871963.184:2204): pid=26413 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871963.188:2205): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765871963.188:2206): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765871963.429:2207): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765871963.430:2208): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765871963.491:2209): pid=26430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765871963.491:2210): pid=26430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64677163736F61656D6D7A7A66627A6F66706E61726D6271737467656F676361203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765871963.492:2211): pid=26430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765871963.494:2212): pid=26430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871963.664:2213): pid=26430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765871963.665:2214): pid=26430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871963.668:2215): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765871963.668:2216): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765871964.386:2217): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765871964.387:2218): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765871964.438:2219): pid=26446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765871964.438:2220): pid=26446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6974737A716A6A71616F7773626A756B7A7669676468636B7465646872716A73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765871964.438:2221): pid=26446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765871964.439:2222): pid=26446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871964.622:2223): pid=26446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765871964.622:2224): pid=26446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871964.624:2225): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765871964.624:2226): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765871965.937:2227): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765871965.937:2228): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765871965.977:2229): pid=26463 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765871965.977:2230): pid=26463 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656E73726C7579707366797773636A6D746C69626B776D6E77796B70696C7269203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765871965.977:2231): pid=26463 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765871965.979:2232): pid=26463 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765871968.952:2233): pid=26465 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rhosp-release-17.1.12-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1765871969.679:2234): pid=26463 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765871969.680:2235): pid=26463 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871969.684:2236): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765871969.685:2237): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765871970.584:2238): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765871970.584:2239): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765871970.637:2240): pid=26483 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765871970.637:2241): pid=26483 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6772717378666B63686970676F677965626976616F6E6D66787A6E6A66736E71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765871970.638:2242): pid=26483 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765871970.642:2243): pid=26483 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871970.810:2244): pid=26483 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765871970.811:2245): pid=26483 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765871970.814:2246): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765871970.814:2247): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765871971.027:2248): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765871971.027:2249): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765871971.085:2250): pid=26500 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765871971.086:2251): pid=26500 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D717071647570717A6D70616A72767961707969687063766C78676B70666E6370203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765871971.086:2252): pid=26500 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765871971.089:2253): pid=26500 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_SESSION msg=audit(1765871980.758:2254): pid=26644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=26645 suid=74 rport=39870 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=139.19.117.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765871980.758:2255): pid=26644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=26645 suid=74 rport=39870 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=139.19.117.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1765871985.529:2256): prog-id=85 op=LOAD
type=BPF msg=audit(1765871985.529:2257): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871985.529:2258): prog-id=86 op=LOAD
type=BPF msg=audit(1765871985.529:2259): prog-id=87 op=LOAD
type=BPF msg=audit(1765871985.529:2260): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871985.529:2261): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871985.530:2262): prog-id=88 op=LOAD
type=BPF msg=audit(1765871985.530:2263): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871985.530:2264): prog-id=89 op=LOAD
type=BPF msg=audit(1765871985.530:2265): prog-id=90 op=LOAD
type=BPF msg=audit(1765871985.530:2266): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871985.530:2267): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871985.531:2268): prog-id=91 op=LOAD
type=BPF msg=audit(1765871985.531:2269): prog-id=92 op=LOAD
type=BPF msg=audit(1765871985.531:2270): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871985.531:2271): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871985.531:2272): prog-id=93 op=LOAD
type=BPF msg=audit(1765871985.531:2273): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871985.533:2274): prog-id=94 op=LOAD
type=BPF msg=audit(1765871985.533:2275): prog-id=0 op=UNLOAD
type=ADD_GROUP msg=audit(1765871989.503:2276): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-group id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="puppet"
type=GRP_MGMT msg=audit(1765871989.510:2277): pid=26723 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=52 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="puppet"
type=ADD_USER msg=audit(1765871989.564:2278): pid=26730 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=add-user acct="puppet" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765871990.640:2279): pid=26644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26645 suid=74 rport=39870 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=139.19.117.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765871990.641:2280): pid=26644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=139.19.117.130 addr=139.19.117.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765871990.641:2281): pid=26644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=139.19.117.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1765871995.404:2282): prog-id=95 op=LOAD
type=BPF msg=audit(1765871995.404:2283): prog-id=96 op=LOAD
type=BPF msg=audit(1765871995.404:2284): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871995.405:2285): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871995.405:2286): prog-id=97 op=LOAD
type=BPF msg=audit(1765871995.405:2287): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871995.408:2288): prog-id=98 op=LOAD
type=BPF msg=audit(1765871995.408:2289): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871995.409:2290): prog-id=99 op=LOAD
type=BPF msg=audit(1765871995.409:2291): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871995.409:2292): prog-id=100 op=LOAD
type=BPF msg=audit(1765871995.409:2293): prog-id=101 op=LOAD
type=BPF msg=audit(1765871995.409:2294): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871995.409:2295): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871995.410:2296): prog-id=102 op=LOAD
type=BPF msg=audit(1765871995.410:2297): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871995.410:2298): prog-id=103 op=LOAD
type=BPF msg=audit(1765871995.410:2299): prog-id=104 op=LOAD
type=BPF msg=audit(1765871995.410:2300): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871995.410:2301): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765871995.494:2302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=lvm2-monitor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765871995.709:2303): prog-id=105 op=LOAD
type=BPF msg=audit(1765871995.709:2304): prog-id=106 op=LOAD
type=BPF msg=audit(1765871995.709:2305): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871995.709:2306): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871995.709:2307): prog-id=107 op=LOAD
type=BPF msg=audit(1765871995.709:2308): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871995.712:2309): prog-id=108 op=LOAD
type=BPF msg=audit(1765871995.712:2310): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871995.713:2311): prog-id=109 op=LOAD
type=BPF msg=audit(1765871995.713:2312): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871995.713:2313): prog-id=110 op=LOAD
type=BPF msg=audit(1765871995.713:2314): prog-id=111 op=LOAD
type=BPF msg=audit(1765871995.713:2315): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871995.713:2316): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871995.714:2317): prog-id=112 op=LOAD
type=BPF msg=audit(1765871995.714:2318): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871995.714:2319): prog-id=113 op=LOAD
type=BPF msg=audit(1765871995.714:2320): prog-id=114 op=LOAD
type=BPF msg=audit(1765871995.715:2321): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765871995.715:2322): prog-id=0 op=UNLOAD
type=USER_MAC_CONFIG_CHANGE msg=audit(1765871998.320:2323): pid=26829 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=modify lport=4444 proto=6 tcontext=system_u:object_r:mysqld_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765871999.536:2324): pid=27097 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=modify lport=6653 proto=6 tcontext=system_u:object_r:openvswitch_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872000.951:2325): pid=27106 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=8088 proto=6 tcontext=system_u:object_r:http_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872001.949:2326): pid=27110 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=modify lport=8000 proto=6 tcontext=system_u:object_r:http_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872003.416:2327): pid=27117 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=6639 proto=6 tcontext=system_u:object_r:ovsdb_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872004.814:2328): pid=27123 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=6641 proto=6 tcontext=system_u:object_r:ovsdb_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872006.447:2329): pid=27129 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=port op=add lport=6642 proto=6 tcontext=system_u:object_r:ovsdb_port_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872007.526:2330): pid=27133 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/swift-object-relinker" ftype=any tcontext=system_u:object_r:swift_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872009.043:2331): pid=27140 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/gnocchi/app.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872011.047:2332): pid=27145 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/tftpboot(/.*)?" ftype=any tcontext=system_u:object_r:tftpdir_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872012.114:2333): pid=27150 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/kolla(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872013.147:2334): pid=27155 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/tripleo-config(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872014.232:2335): pid=27160 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/vhost_sockets(/.*)?" ftype=any tcontext=system_u:object_r:virt_cache_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872015.224:2336): pid=27165 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/neutron-rootwrap-daemon" ftype=any tcontext=system_u:object_r:neutron_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872016.240:2337): pid=27170 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/cache/swift(/.*)?" ftype=any tcontext=system_u:object_r:swift_var_cache_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872017.319:2338): pid=27175 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/designate/bind9(/.*)?" ftype=any tcontext=system_u:object_r:named_zone_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872018.375:2339): pid=27219 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/httpboot(/.*)?" ftype=any tcontext=system_u:object_r:httpd_sys_content_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872019.440:2340): pid=27224 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/panko/app.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872020.386:2341): pid=27236 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/nova/.ssh(/.*)?" ftype=any tcontext=system_u:object_r:ssh_home_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872021.363:2342): pid=27241 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/zaqar/zaqar.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872022.308:2343): pid=27246 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/neutron-vpn-agent" ftype=any tcontext=system_u:object_r:neutron_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872023.283:2344): pid=27251 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/pacemaker.log.*" ftype=any tcontext=system_u:object_r:cluster_var_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872024.284:2345): pid=27258 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/usr/bin/swift-object-reconstructor" ftype=any tcontext=system_u:object_r:swift_exec_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872025.215:2346): pid=27263 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/openstack-dashboard" ftype=any tcontext=system_u:object_r:httpd_var_lib_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872026.655:2347): pid=27269 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/log/aodh/app.log" ftype=any tcontext=system_u:object_r:httpd_log_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872027.751:2348): pid=27274 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/config-data(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t: comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872044.775:2349): bool=httpd_execmem val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872044.775:2349): bool=httpd_can_network_connect val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872044.775:2349): bool=httpd_use_openstack val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872044.775:2349): bool=domain_can_mmap_files val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872044.775:2349): bool=domain_kernel_load_modules val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872044.775:2349): bool=nis_enabled val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872044.775:2349): bool=collectd_tcp_network_connect val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872044.775:2349): bool=glance_api_can_network val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872044.775:2349): bool=glance_use_fusefs val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872044.775:2349): bool=glance_use_execmem val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872044.775:2349): bool=daemons_enable_cluster_mode val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872044.775:2349): bool=neutron_can_network val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872044.775:2349): bool=haproxy_connect_any val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872044.775:2349): bool=rsync_client val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872044.775:2349): bool=rsync_full_access val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872044.775:2349): bool=swift_can_network val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872044.775:2349): bool=virt_use_execmem val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872044.775:2349): bool=virt_use_fusefs val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=SYSCALL msg=audit(1765872044.775:2349): arch=c000003e syscall=1 success=yes exit=2 a0=34 a1=7fff6dac6d6e a2=2 a3=0 items=0 ppid=26825 pid=27284 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="semanage" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872044.775:2349): proctitle=2F7573722F62696E2F707974686F6E33002D457349002F7573722F7362696E2F73656D616E61676500696D706F7274002D4E
type=MAC_POLICY_LOAD msg=audit(1765872046.775:2350): auid=1002 ses=14 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1765872046.775:2350): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7fb4f9600000 a2=36aa51 a3=0 items=0 ppid=26825 pid=27386 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872046.775:2350): proctitle="/usr/sbin/load_policy"
type=SERVICE_START msg=audit(1765872047.274:2351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r921da7a945834b66bf987ab8e22b7ce6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765872047.530:2352): prog-id=115 op=LOAD
type=BPF msg=audit(1765872047.530:2353): prog-id=116 op=LOAD
type=BPF msg=audit(1765872047.530:2354): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872047.530:2355): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872047.530:2356): prog-id=117 op=LOAD
type=BPF msg=audit(1765872047.530:2357): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872047.533:2358): prog-id=118 op=LOAD
type=BPF msg=audit(1765872047.533:2359): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872047.534:2360): prog-id=119 op=LOAD
type=BPF msg=audit(1765872047.534:2361): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872047.535:2362): prog-id=120 op=LOAD
type=BPF msg=audit(1765872047.535:2363): prog-id=121 op=LOAD
type=BPF msg=audit(1765872047.535:2364): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872047.535:2365): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872047.536:2366): prog-id=122 op=LOAD
type=BPF msg=audit(1765872047.536:2367): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872047.536:2368): prog-id=123 op=LOAD
type=BPF msg=audit(1765872047.536:2369): prog-id=124 op=LOAD
type=BPF msg=audit(1765872047.536:2370): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872047.536:2371): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765872047.581:2372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r55bf4d1b20ef4a859aa2f23e2be44f62 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1765872047.647:2373): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-libs-3.0.4-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2374): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-bigdecimal-3.0.0-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2375): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-default-gems-3.0.4-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2376): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-bundler-2.2.33-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2377): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-io-console-0.5.7-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2378): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-json-2.5.1-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2379): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-psych-3.3.2-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2380): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-rdoc-6.3.3-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2381): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygems-3.2.33-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2382): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-3.0.4-161.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2383): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-regex-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2384): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-system-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2385): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-filesystem-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2386): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-thread-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2387): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libaio-0.3.111-13.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2388): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-chrono-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2389): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-locale-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2390): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="device-mapper-libs-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2391): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="device-mapper-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2392): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="device-mapper-event-libs-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2393): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-simplejson-3.17.5-3.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2394): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-os-service-types-1.7.0-17.1.20230620201222.0b2f473.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2395): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-keystoneauth1-4.4.0-17.1.20240812145234.112bcae.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2396): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="dib-utils-0.0.11-17.1.20230620173328.51661c3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2397): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-jeepney-0.6.0-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2398): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-psutil-5.8.0-12.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2399): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-refresh-config-13.1.1-17.1.20231020000854.812905b.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2400): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-secretstorage-3.3.1-3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2401): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-keyring-21.8.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2402): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pystache-0.5.4-15.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2403): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-apply-config-13.1.1-17.1.20231020001757.3c7f9b9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2404): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="device-mapper-event-9:1.02.187-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2405): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="lvm2-libs-9:2.03.17-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2406): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="device-mapper-persistent-data-0.9.0-13.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2407): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-fast_gettext-1.2.0-9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2408): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-hocon-1.3.1-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2409): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="hiera-3.6.0-6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2410): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-rexml-3.2.5-161.el9_2.2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2411): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-concurrent-ruby-1.1.5-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2412): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-deep_merge-1.2.1-7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2413): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-multi_json-1.15.0-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2414): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-ruby-shadow-2.5.0-15.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2415): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-semantic_puppet-1.0.4-2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2416): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libselinux-ruby-3.5-1.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2417): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-augeas-0.5.0-29.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2418): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="yaml-cpp-0.6.3-6.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2419): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-rsa-4.6-3.1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2420): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-boto-2.45.0-8.1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2421): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="heat-cfntools-1.4.2-6.1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2422): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-munch-2.5.0-6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2423): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-msgpack-1.0.2-4.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2424): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-serialization-4.1.1-17.1.20230621011445.bbe5d5a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2425): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-keystoneclient-1:4.3.0-17.1.20230621025111.d5cb761.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.648:2426): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-swiftclient-3.11.1-17.1.20230620204150.06b36ae.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2427): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-colorama-0.4.4-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2428): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-requestsexceptions-1.4.0-17.1.20230620164652.d7ac0ff.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2429): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-context-3.2.1-17.1.20230620204857.b124eb7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2430): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python-oslo-log-lang-4.4.0-17.1.20230620205407.9b29c90.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2431): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-oslo-log-4.4.0-17.1.20230620205407.9b29c90.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2432): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-pyperclip-1.8.0-3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2433): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-jmespath-0.10.0-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2434): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="libxslt-1.1.34-11.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2435): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-lxml-4.6.5-3.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2436): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pcp-conf-6.0.1-8.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2437): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="pcp-libs-6.0.1-8.el9_2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2438): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-mako-1.1.4-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2439): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-dogpile-cache-1.1.5-5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2440): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="oniguruma-6.9.6-1.el9.5.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2441): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-wcwidth-0.2.5-8.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2442): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cmd2-1.4.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2443): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-cliff-3.7.0-17.1.20230620172206.117a100.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2444): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-appdirs-1.4.4-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2445): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-openstacksdk-0.55.1-17.1.20250516211008.f09ed4a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2446): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-osc-lib-2.3.1-17.1.20230620203400.2b7a679.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2447): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heatclient-2.3.1-17.1.20230621012952.d16c245.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2448): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-zaqarclient-2.4.0-17.1.20230620214253.e388947.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2449): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="os-collect-config-13.1.1-17.1.20231020001748.76173d8.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2450): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2451): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-ansible-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2452): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-apply-config-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2453): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-docker-cmd-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2454): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-hiera-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2455): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-json-file-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2456): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="lm_sensors-libs-3.6.0-10.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2457): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-atomic-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2458): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-log-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2459): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-program-options-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2460): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="iptables-nft-services-1.8.8-6.el9_1.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2461): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="boost-nowide-1.75.0-8.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2462): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="leatherman-1.12.6-5.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2463): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="cpp-hocon-0.3.0-7.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2464): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="facter-1:3.14.19-3.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2465): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="ruby-facter-1:3.14.19-3.el9ost.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2466): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="rubygem-puppet-resource_api-1.8.13-1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2467): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-headless-7.10.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2468): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-7.10.0-4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2469): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-stdlib-6.3.1-17.1.20230621000857.7c1ae25.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2470): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-inifile-4.2.1-17.1.20250804150825.df46d2a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2471): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-concat-6.2.1-17.1.20250725131333.dfeabb9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2472): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-apache-6.5.2-17.1.20250811150836.e4a1532.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2473): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-xinetd-3.3.1-17.1.20230620185435.8d460c4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2474): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-firewall-3.4.1-17.1.20250804151611.94f707c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2475): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-memcached-6.0.0-17.1.20230620184630.4c70dbd.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2476): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-sysctl-0.0.13-17.1.20250725113328.847ec1c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2477): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-rsync-1.1.4-17.1.20250804151510.ea6397e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2478): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-corosync-8.0.1-17.1.20230621104908.6a9da9a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.649:2479): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-mysql-10.6.1-17.1.20230621022141.937d044.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2480): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-systemd-2.12.1-17.1.20230620191611.8f68b0d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2481): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-redis-6.1.1-17.1.20230620191704.547105e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2482): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-openstack_extras-18.5.1-17.1.20230621042409.504e1a0.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2483): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-horizon-18.6.1-17.1.20251008130751.8074e69.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2484): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-pacemaker-1.5.1-17.1.20250214161010.f10ce89.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2485): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-auditd-2.2.1-17.1.20230620192453.189b22b.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2486): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-collectd-13.0.1-17.1.20230620193147.ad138a7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2487): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-dns-8.2.1-17.1.20230621002045.70f5b28.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2488): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-rsyslog-4.0.1-17.1.20230620200132.2548a0d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2489): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ssh-6.2.1-17.1.20230620190251.6e0f430.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2490): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-haproxy-4.2.2-17.1.20250725114653.a797b8c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2491): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-keepalived-0.0.2-17.1.20250725114922.bbca37a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2492): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-fdio-18.2-1.20220727113954.6fd1c8e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2493): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-archive-4.6.1-17.1.20230620181607.bc7e4ff.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2494): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-rabbitmq-11.0.1-17.1.20230620182519.63fee2c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2495): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-openstacklib-18.5.2-17.1.20230621052822.64d8ac6.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2496): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-oslo-18.5.1-17.1.20230621052358.fe2a147.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2497): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-keystone-18.6.1-17.1.20251008090800.cb0adcb.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2498): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-glance-18.6.1-17.1.20250220151014.81b081d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2499): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-cinder-18.5.2-17.1.20230621054224.6aa60e7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2500): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-nova-18.6.1-17.1.20230621090443.a21eae4.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2501): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-octavia-18.5.1-17.1.20230621062420.842492c.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2502): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-manila-18.5.2-17.1.20231102190827.a72a7d5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2503): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ceilometer-18.4.3-17.1.20230927010818.3838907.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2504): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-designate-18.6.1-17.1.20230621061456.f4c0b89.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2505): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-gnocchi-18.4.3-17.1.20230621061020.7584b94.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2506): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-heat-18.4.1-17.1.20230621111632.3b41bb0.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2507): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-placement-5.4.3-17.1.20230621061610.e7557a5.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2508): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-swift-18.6.1-17.1.20230621052139.f105ffc.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2509): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-barbican-18.4.2-17.1.20250625204151.af6c77b.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2510): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-aodh-18.4.2-17.1.20230620151218.3e47b5a.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2511): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-certmonger-2.7.1-17.1.20230620184730.3e2e660.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2512): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-etcd-1.12.3-17.1.20230620193226.e143c2d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2513): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-nssdb-1.0.2-17.1.20230620185645.2ed2a2d.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2514): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-qdr-7.4.1-17.1.20230620195605.8a575de.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2515): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ovn-18.6.1-17.1.20240925094907.7805f7e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2516): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-git-0.5.0-17.1.20250725114148.4e4498e.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2517): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ipaclient-2.5.2-17.1.20250725102608.b086731.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2518): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-snmp-3.9.1-17.1.20250725115759.5d73485.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2519): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-kmod-2.5.0-17.1.20230620190646.52e31e3.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2520): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-vswitch-14.4.3-17.1.20230621043558.51e82ca.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2521): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-neutron-18.6.1-17.1.20230621053056.c9d467f.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2522): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="python3-heat-agent-puppet-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2523): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-module-data-0.5.1-17.1.20250725115430.28dafce.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2524): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-remote-10.0.0-17.1.20250725114017.7420908.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2525): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-vcsrepo-3.1.1-17.1.20250725113408.a36ee18.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2526): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-ironic-18.7.1-17.1.20240305210817.edf93f9.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2527): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="glibc-langpack-en-2.34-60.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2528): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="puppet-tripleo-14.2.3-17.1.20250320101351.40278e1.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2529): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-heat-agents-2.2.1-17.1.20230620232028.ed16cc7.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2530): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="sysstat-12.5.4-5.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2531): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="jq-1.6-14.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.650:2532): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="lvm2-9:2.03.17-7.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.651:2533): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="openstack-selinux-0.8.37-17.1.20231107080825.05dd1b2.el9ost.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.651:2534): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="tmpwatch-2.11-20.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872047.651:2535): pid=26502 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="driverctl-0.111-2.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765872048.068:2536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872048.068:2537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872048.071:2538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r921da7a945834b66bf987ab8e22b7ce6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872048.072:2539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r55bf4d1b20ef4a859aa2f23e2be44f62 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872048.748:2540): pid=26500 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872048.749:2541): pid=26500 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872048.753:2542): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872048.753:2543): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872048.941:2544): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872048.941:2545): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872048.993:2546): pid=28319 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872048.993:2547): pid=28319 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69677878756171776B726E696A65616E6662646F75676F74626974656B777665203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872048.994:2548): pid=28319 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872048.999:2549): pid=28319 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872049.804:2550): pid=28319 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872049.805:2551): pid=28319 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872049.808:2552): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872049.808:2553): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872050.264:2554): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872050.264:2555): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872050.319:2556): pid=28458 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872050.319:2557): pid=28458 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6C75766D6576666A7171736678706A676C726B78767A6172616374787A736B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872050.320:2558): pid=28458 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872050.322:2559): pid=28458 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872050.869:2560): prog-id=125 op=LOAD
type=BPF msg=audit(1765872050.869:2561): prog-id=126 op=LOAD
type=BPF msg=audit(1765872050.869:2562): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872050.870:2563): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872050.870:2564): prog-id=127 op=LOAD
type=BPF msg=audit(1765872050.870:2565): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872050.873:2566): prog-id=128 op=LOAD
type=BPF msg=audit(1765872050.873:2567): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872050.874:2568): prog-id=129 op=LOAD
type=BPF msg=audit(1765872050.874:2569): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872050.874:2570): prog-id=130 op=LOAD
type=BPF msg=audit(1765872050.874:2571): prog-id=131 op=LOAD
type=BPF msg=audit(1765872050.874:2572): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872050.874:2573): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872050.876:2574): prog-id=132 op=LOAD
type=BPF msg=audit(1765872050.876:2575): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872050.876:2576): prog-id=133 op=LOAD
type=BPF msg=audit(1765872050.876:2577): prog-id=134 op=LOAD
type=BPF msg=audit(1765872050.876:2578): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872050.876:2579): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765872050.916:2580): pid=28458 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872050.917:2581): pid=28458 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872050.922:2582): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872050.922:2583): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872052.046:2584): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872052.046:2585): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872052.116:2586): pid=28512 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872052.116:2587): pid=28512 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F646A686364786A647472777A6877716B6F6C6B6473686B6E6E6F6D73797A7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872052.117:2588): pid=28512 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872052.122:2589): pid=28512 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872052.304:2590): pid=28512 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872052.305:2591): pid=28512 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872052.308:2592): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872052.309:2593): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872052.502:2594): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872052.502:2595): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872052.561:2596): pid=28528 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872052.561:2597): pid=28528 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7A64736D646E6C78766D756374786B78637A7862636F646171716F79796564203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872052.562:2598): pid=28528 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872052.564:2599): pid=28528 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872052.754:2600): pid=28528 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872052.755:2601): pid=28528 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872052.757:2602): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872052.757:2603): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872053.104:2604): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872053.104:2605): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872053.157:2606): pid=28545 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872053.157:2607): pid=28545 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796664716570636A697770756E64676965676D6F6A65627177666F6277787767203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872053.158:2608): pid=28545 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872053.160:2609): pid=28545 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872053.490:2610): pid=28545 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872053.491:2611): pid=28545 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872053.494:2612): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872053.494:2613): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872054.860:2614): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872054.860:2615): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872054.923:2616): pid=28563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872054.923:2617): pid=28563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F67656D686570787379746868637A6A67776F627368686A6D74737A67677869203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872054.924:2618): pid=28563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872054.926:2619): pid=28563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872055.126:2620): pid=28563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872055.126:2621): pid=28563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872055.130:2622): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872055.130:2623): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872055.259:2624): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872055.259:2625): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872055.321:2626): pid=28581 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872055.322:2627): pid=28581 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616E766561777369637A74717262787275796266666168637367726870717271203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872055.322:2628): pid=28581 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872055.324:2629): pid=28581 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872055.507:2630): pid=28581 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872055.507:2631): pid=28581 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872055.512:2632): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872055.512:2633): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872055.680:2634): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872055.680:2635): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872055.739:2636): pid=28599 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872055.740:2637): pid=28599 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636B68697A6377696E786368776E716271677571626A6D77716F716D666C6579203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872055.740:2638): pid=28599 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872055.744:2639): pid=28599 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872056.058:2640): pid=28599 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872056.058:2641): pid=28599 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872056.063:2642): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872056.063:2643): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872056.280:2644): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872056.280:2645): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872056.338:2646): pid=28618 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872056.338:2647): pid=28618 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6778776F6A6E76757879696A6F64656D6962666D6E6762637073776174696178203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872056.339:2648): pid=28618 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872056.341:2649): pid=28618 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872056.518:2650): pid=28618 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872056.518:2651): pid=28618 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872056.520:2652): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872056.521:2653): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872057.879:2654): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872057.879:2655): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872057.943:2656): pid=28635 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872057.943:2657): pid=28635 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C626E6F6D61706D7276737A686670767377636E6C74616C716D647862656566203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872057.944:2658): pid=28635 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872057.946:2659): pid=28635 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872058.126:2660): pid=28635 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872058.126:2661): pid=28635 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872058.130:2662): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872058.130:2663): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872058.243:2664): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872058.244:2665): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872058.303:2666): pid=28653 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872058.303:2667): pid=28653 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7972786B6E6B757879686D636B736A6B617A66726273776B7A657A71787A7372203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872058.304:2668): pid=28653 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872058.307:2669): pid=28653 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872058.500:2670): pid=28653 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872058.500:2671): pid=28653 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872058.504:2672): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872058.504:2673): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872058.644:2674): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872058.644:2675): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872058.703:2676): pid=28669 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872058.703:2677): pid=28669 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716A737A6F7575616C6B62687277727174716262656F6F666767686266696466203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872058.704:2678): pid=28669 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872058.706:2679): pid=28669 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872058.897:2680): pid=28669 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872058.898:2681): pid=28669 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872058.901:2682): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872058.901:2683): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872059.386:2684): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872059.386:2685): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872059.446:2686): pid=28685 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872059.446:2687): pid=28685 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787963766E697463736C726962646E7071756E737A6171646F746C6B74786F75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872059.447:2688): pid=28685 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872059.450:2689): pid=28685 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872059.611:2690): pid=28685 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872059.611:2691): pid=28685 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872059.615:2692): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872059.615:2693): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872059.808:2694): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872059.808:2695): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872059.854:2696): pid=28701 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872059.854:2697): pid=28701 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6561747773767A6F7870616F6D736C6F6B6777686A636A716367676D7A6F75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872059.855:2698): pid=28701 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872059.857:2699): pid=28701 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872060.019:2700): pid=28701 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872060.019:2701): pid=28701 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872060.023:2702): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872060.023:2703): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872060.688:2704): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872060.688:2705): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872060.737:2706): pid=28717 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872060.738:2707): pid=28717 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6C6B696F65797A70746874667A76776A6A78736B78626D6E76756275696A64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872060.738:2708): pid=28717 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872060.741:2709): pid=28717 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872060.890:2710): pid=28717 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872060.890:2711): pid=28717 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872060.895:2712): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872060.895:2713): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872061.102:2714): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872061.102:2715): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872061.137:2716): pid=28733 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872061.138:2717): pid=28733 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706864677A7778696F6E6F6270637271756A6E7267656B747875776672786B76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872061.138:2718): pid=28733 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872061.140:2719): pid=28733 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872061.300:2720): pid=28733 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872061.301:2721): pid=28733 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872061.304:2722): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872061.304:2723): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872061.563:2724): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872061.563:2725): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872061.610:2726): pid=28751 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872061.610:2727): pid=28751 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79756666786E7468736F7A6D706B7779676C6F696469637A706E757A7A767475203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872061.611:2728): pid=28751 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872061.614:2729): pid=28751 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872061.782:2730): pid=28751 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872061.782:2731): pid=28751 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872061.785:2732): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872061.785:2733): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872062.312:2734): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872062.312:2735): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872062.358:2736): pid=28778 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872062.358:2737): pid=28778 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706F79636F726B796A746F70696A67736C776C6B756A626C7172786A6D69766E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872062.358:2738): pid=28778 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872062.362:2739): pid=28778 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872062.509:2740): pid=28778 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872062.510:2741): pid=28778 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872062.513:2742): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872062.513:2743): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872062.581:2744): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872062.581:2745): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872062.628:2746): pid=28794 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872062.628:2747): pid=28794 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69746A76636E65626B76736A7676636465636973636C67686A716B6869777178203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872062.628:2748): pid=28794 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872062.630:2749): pid=28794 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872062.800:2750): pid=28794 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872062.800:2751): pid=28794 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872062.804:2752): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872062.804:2753): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872062.882:2754): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872062.882:2755): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872062.935:2756): pid=28812 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872062.936:2757): pid=28812 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617971696B72636F666469676564687578627272797163646C67667576686F6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872062.937:2758): pid=28812 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872062.940:2759): pid=28812 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872063.107:2760): pid=28812 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872063.108:2761): pid=28812 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872063.110:2762): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872063.110:2763): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872063.305:2764): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872063.305:2765): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872063.364:2766): pid=28831 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872063.364:2767): pid=28831 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726B6B6A68656C74626E626F756C71636D6B78617A796C65707374637575706A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872063.365:2768): pid=28831 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872063.368:2769): pid=28831 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872063.534:2770): pid=28831 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872063.534:2771): pid=28831 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872063.538:2772): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872063.538:2773): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872063.651:2774): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872063.651:2775): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872063.708:2776): pid=28847 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872063.708:2777): pid=28847 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627167636C7262766B6C736B777169756C6F777076676D6C706C657765766A66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872063.709:2778): pid=28847 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872063.711:2779): pid=28847 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872063.901:2780): pid=28847 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872063.902:2781): pid=28847 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872063.907:2782): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872063.907:2783): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872063.979:2784): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872063.979:2785): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872064.003:2786): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872064.003:2787): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872064.045:2788): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872064.045:2789): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872064.079:2790): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872064.079:2791): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872064.119:2792): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872064.120:2793): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872064.174:2794): pid=28895 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872064.174:2795): pid=28895 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7873657A746E656E766E666378786863716A746366706768716B63766B776675203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872064.175:2796): pid=28895 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872064.178:2797): pid=28895 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872064.309:2798): pid=28895 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872064.310:2799): pid=28895 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872064.314:2800): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872064.315:2801): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872064.356:2802): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872064.356:2803): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872064.391:2804): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872064.391:2805): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872064.433:2806): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872064.433:2807): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872064.460:2808): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872064.460:2809): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872064.502:2810): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872064.502:2811): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872064.538:2812): pid=28938 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872064.538:2813): pid=28938 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686B6C6866686278706D6E6A6E73646E786E626875656E7068626675616E636B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872064.539:2814): pid=28938 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872064.540:2815): pid=28938 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872064.686:2816): pid=28938 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872064.686:2817): pid=28938 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872064.690:2818): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872064.691:2819): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872064.732:2820): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872064.732:2821): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872064.760:2822): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872064.760:2823): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872065.512:2824): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872065.513:2825): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872065.549:2826): pid=28968 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872065.550:2827): pid=28968 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6A72776C796B64736B6772786D72696E72696F656763726D796A67686C7867203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872065.551:2828): pid=28968 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872065.553:2829): pid=28968 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872065.708:2830): pid=28968 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872065.708:2831): pid=28968 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872065.710:2832): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872065.710:2833): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872065.816:2834): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872065.816:2835): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872065.847:2836): pid=28985 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872065.847:2837): pid=28985 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7A786172777270717A71706A657977646362616F6661677861657172786773203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872065.847:2838): pid=28985 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872065.849:2839): pid=28985 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765872069.562:2840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra930cbeba5e848488f058037b921df0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765872069.784:2841): prog-id=135 op=LOAD
type=BPF msg=audit(1765872069.784:2842): prog-id=136 op=LOAD
type=BPF msg=audit(1765872069.784:2843): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872069.784:2844): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872069.785:2845): prog-id=137 op=LOAD
type=BPF msg=audit(1765872069.785:2846): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872069.787:2847): prog-id=138 op=LOAD
type=BPF msg=audit(1765872069.787:2848): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872069.788:2849): prog-id=139 op=LOAD
type=BPF msg=audit(1765872069.789:2850): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872069.789:2851): prog-id=140 op=LOAD
type=BPF msg=audit(1765872069.789:2852): prog-id=141 op=LOAD
type=BPF msg=audit(1765872069.789:2853): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872069.789:2854): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872069.790:2855): prog-id=142 op=LOAD
type=BPF msg=audit(1765872069.790:2856): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872069.790:2857): prog-id=143 op=LOAD
type=BPF msg=audit(1765872069.790:2858): prog-id=144 op=LOAD
type=BPF msg=audit(1765872069.790:2859): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872069.790:2860): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765872069.863:2861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872069.966:2862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872069.966:2863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872069.967:2864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra930cbeba5e848488f058037b921df0b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872071.179:2865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872071.211:2866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra1de943c045b4504ac754006ef1abdaf comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1765872071.215:2867): pid=28987 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="tuned-2.25.1-1.7.20250812gitdf64818e.el9fdp.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872071.215:2868): pid=28987 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="tuned-profiles-cpu-partitioning-2.25.1-1.7.20250812gitdf64818e.el9fdp.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765872071.465:2869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872071.465:2870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872071.466:2871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra1de943c045b4504ac754006ef1abdaf comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872072.077:2872): pid=28985 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872072.077:2873): pid=28985 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872072.082:2874): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872072.082:2875): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872072.181:2876): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872072.181:2877): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872072.257:2878): pid=29431 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872072.258:2879): pid=29431 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70686876796D716D69646F736D62676C7179646B7A6673716A716E657579756A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872072.259:2880): pid=29431 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872072.262:2881): pid=29431 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765872072.632:2882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872074.006:2883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tuned comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872074.035:2884): pid=29431 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872074.036:2885): pid=29431 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872074.039:2886): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872074.039:2887): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872074.139:2888): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872074.139:2889): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872074.199:2890): pid=29626 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872074.199:2891): pid=29626 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75726C636172757A76636E63736D74737972696E756F776A657A626B75686E6B203B20504154483D2F62696E3A2F7573722F62696E3A2F7362696E3A2F7573722F7362696E202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872074.201:2892): pid=29626 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872074.204:2893): pid=29626 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872074.369:2894): pid=29626 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872074.369:2895): pid=29626 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872074.373:2896): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872074.374:2897): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872074.794:2898): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872074.794:2899): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872074.852:2900): pid=29643 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872074.853:2901): pid=29643 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6277627771796B636C6B74797A6B7677797A75777A78657A6E79617370776666203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872074.853:2902): pid=29643 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872074.856:2903): pid=29643 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872075.009:2904): pid=29643 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872075.009:2905): pid=29643 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872075.013:2906): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872075.014:2907): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872075.126:2908): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872075.126:2909): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872075.183:2910): pid=29659 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872075.183:2911): pid=29659 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687976636F6D68747075686E666C7573647163626F67676F6172626569707179203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872075.184:2912): pid=29659 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872075.186:2913): pid=29659 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872075.340:2914): pid=29659 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872075.340:2915): pid=29659 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872075.344:2916): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872075.344:2917): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872075.553:2918): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872075.553:2919): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872075.606:2920): pid=29675 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872075.607:2921): pid=29675 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7167696C66657473746B66696372766F66627A70616276616872706975747464203B20504154483D2F62696E3A2F7573722F62696E3A2F7362696E3A2F7573722F7362696E202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872075.607:2922): pid=29675 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872075.610:2923): pid=29675 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872076.911:2924): pid=29675 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872076.911:2925): pid=29675 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872076.915:2926): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872076.915:2927): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872077.194:2928): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872077.194:2929): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872077.256:2930): pid=29695 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872077.256:2931): pid=29695 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72726A616F77636B6D7A61686B6678696472696C6A78646477796A65767A6479203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872077.257:2932): pid=29695 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872077.259:2933): pid=29695 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872077.432:2934): pid=29695 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872077.432:2935): pid=29695 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872077.436:2936): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872077.436:2937): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872077.620:2938): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872077.620:2939): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872077.678:2940): pid=29712 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872077.678:2941): pid=29712 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67777A737563786D71666676756A7761776770746D6F7A6E6E75646174796476203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872077.679:2942): pid=29712 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872077.682:2943): pid=29712 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872077.846:2944): pid=29712 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872077.846:2945): pid=29712 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872077.850:2946): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872077.851:2947): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872079.321:2948): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872079.321:2949): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872079.378:2950): pid=29729 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872079.378:2951): pid=29729 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676B76776E7466726372646D776376756F7A746C67746C7076796A6677717777203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872079.379:2952): pid=29729 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872079.382:2953): pid=29729 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872079.553:2954): pid=29729 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872079.554:2955): pid=29729 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872079.557:2956): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872079.557:2957): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872085.946:2958): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872085.946:2959): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872085.999:2960): pid=29745 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872085.999:2961): pid=29745 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B736978627A6C6D72776874776B77737274696A6F776E7977716A797669626E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872085.999:2962): pid=29745 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872086.000:2963): pid=29745 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872086.177:2964): pid=29745 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872086.178:2965): pid=29745 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872086.181:2966): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872086.181:2967): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872086.319:2968): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872086.319:2969): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872086.346:2970): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872086.346:2971): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872086.387:2972): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872086.387:2973): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872086.416:2974): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872086.416:2975): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872086.458:2976): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872086.458:2977): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872086.515:2978): pid=29793 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872086.516:2979): pid=29793 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6762766A626F63686571656E7A6F72696D6F6E70626F727871766674696A766A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872086.516:2980): pid=29793 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872086.519:2981): pid=29793 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872086.706:2982): pid=29793 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872086.706:2983): pid=29793 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872086.710:2984): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872086.710:2985): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872086.752:2986): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872086.752:2987): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872086.786:2988): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872086.786:2989): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872086.829:2990): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872086.829:2991): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872086.861:2992): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872086.861:2993): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872086.901:2994): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872086.902:2995): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872086.959:2996): pid=29838 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872086.960:2997): pid=29838 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686B77747173716B6373736567646D6C7A6173786A7A6A72687376626973716E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872086.961:2998): pid=29838 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872086.963:2999): pid=29838 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872087.134:3000): pid=29838 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872087.135:3001): pid=29838 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872087.137:3002): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872087.138:3003): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872087.179:3004): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872087.179:3005): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872087.210:3006): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872087.210:3007): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872087.409:3008): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872087.409:3009): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872087.467:3010): pid=29868 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872087.468:3011): pid=29868 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737265616B6A6F6775636A6F6B6E676E767465637A636765726373716F62787A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872087.468:3012): pid=29868 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872087.471:3013): pid=29868 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872087.648:3014): pid=29868 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872087.649:3015): pid=29868 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872087.653:3016): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872087.653:3017): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872087.825:3018): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872087.826:3019): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872087.855:3020): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872087.855:3021): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872087.897:3022): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872087.897:3023): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872087.933:3024): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872087.933:3025): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872087.974:3026): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872087.974:3027): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872088.032:3028): pid=29916 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872088.032:3029): pid=29916 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79676C7376716F78756F697568776265647A6C72686867726677686765646E68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872088.033:3030): pid=29916 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872088.034:3031): pid=29916 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872088.202:3032): pid=29916 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872088.203:3033): pid=29916 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872088.206:3034): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872088.206:3035): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872088.248:3036): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872088.248:3037): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872088.286:3038): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872088.286:3039): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872088.326:3040): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872088.327:3041): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872088.358:3042): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872088.358:3043): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872088.400:3044): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872088.400:3045): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872088.457:3046): pid=29959 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872088.458:3047): pid=29959 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727A6E6F63646966696E6F77786B69666F7664616266717971737165637A6C76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872088.459:3048): pid=29959 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872088.461:3049): pid=29959 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872088.630:3050): pid=29959 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872088.630:3051): pid=29959 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872088.634:3052): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872088.634:3053): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872088.676:3054): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872088.676:3055): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872088.707:3056): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872088.708:3057): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872088.827:3058): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872088.827:3059): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872088.857:3060): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872088.857:3061): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872088.899:3062): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872088.899:3063): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872088.932:3064): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872088.932:3065): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872089.003:3066): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872089.003:3067): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872089.059:3068): pid=30021 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872089.060:3069): pid=30021 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77626B6C68776D736D63706D69617873737771677A7472656D7270796662726B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872089.060:3070): pid=30021 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872089.063:3071): pid=30021 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872089.248:3072): pid=30021 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872089.248:3073): pid=30021 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872089.252:3074): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872089.252:3075): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872089.293:3076): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872089.293:3077): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872089.332:3078): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872089.332:3079): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872089.373:3080): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872089.374:3081): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872089.402:3082): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872089.402:3083): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872089.444:3084): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872089.444:3085): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872089.501:3086): pid=30064 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872089.501:3087): pid=30064 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65696D7268656C73637076716565616E6369627378677375747475786E78616C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872089.502:3088): pid=30064 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872089.504:3089): pid=30064 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872089.676:3090): pid=30064 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872089.677:3091): pid=30064 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872089.681:3092): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872089.681:3093): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872089.705:3094): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872089.705:3095): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872089.733:3096): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872089.733:3097): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872089.797:3098): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872089.797:3099): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872089.826:3100): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872089.826:3101): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872089.868:3102): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872089.868:3103): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872089.902:3104): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872089.902:3105): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872090.014:3106): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872090.014:3107): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872090.073:3108): pid=30126 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872090.073:3109): pid=30126 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667561626E7A6D6B62737A74616F7170776E6779626A686B6C6E776961797477203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872090.074:3110): pid=30126 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872090.077:3111): pid=30126 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872090.245:3112): pid=30126 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872090.245:3113): pid=30126 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872090.249:3114): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872090.249:3115): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872090.291:3116): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872090.291:3117): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872090.328:3118): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872090.328:3119): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872090.370:3120): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872090.370:3121): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872090.401:3122): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872090.401:3123): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872090.443:3124): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872090.443:3125): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872090.502:3126): pid=30169 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872090.502:3127): pid=30169 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77617A716172746B77766B6C6469726E68776C64686D6D766569776476636B6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872090.503:3128): pid=30169 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872090.505:3129): pid=30169 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872090.680:3130): pid=30169 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872090.681:3131): pid=30169 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872090.685:3132): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872090.685:3133): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872090.727:3134): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872090.727:3135): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872090.761:3136): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872090.761:3137): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872090.825:3138): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872090.825:3139): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872090.851:3140): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872090.851:3141): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872090.893:3142): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872090.893:3143): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872090.923:3144): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872090.923:3145): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872091.095:3146): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872091.095:3147): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872091.154:3148): pid=30231 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872091.155:3149): pid=30231 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6879756872686D7272746366726A736E767568616B696272616977677A736170203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872091.155:3150): pid=30231 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872091.157:3151): pid=30231 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872091.325:3152): pid=30231 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872091.325:3153): pid=30231 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872091.329:3154): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872091.329:3155): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872091.371:3156): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872091.371:3157): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872091.408:3158): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872091.408:3159): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872091.449:3160): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872091.449:3161): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872091.480:3162): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872091.481:3163): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872091.521:3164): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872091.522:3165): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872091.581:3166): pid=30274 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872091.581:3167): pid=30274 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6E6B73636876757A6E78616D617867616C7375646775677968757A73716B75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872091.582:3168): pid=30274 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872091.584:3169): pid=30274 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872091.762:3170): pid=30274 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872091.762:3171): pid=30274 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872091.770:3172): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872091.770:3173): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872091.812:3174): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872091.812:3175): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872091.843:3176): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872091.843:3177): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872091.904:3178): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872091.904:3179): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872091.935:3180): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872091.935:3181): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872091.977:3182): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872091.977:3183): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872092.013:3184): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872092.013:3185): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872092.055:3186): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872092.055:3187): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872092.114:3188): pid=30336 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872092.114:3189): pid=30336 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7466767A727671696A666E696C72666C626D716D766B77687A63627569646971203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872092.115:3190): pid=30336 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872092.117:3191): pid=30336 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872092.293:3192): pid=30336 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872092.293:3193): pid=30336 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872092.297:3194): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872092.298:3195): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872092.340:3196): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872092.340:3197): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872092.386:3198): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872092.386:3199): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872092.427:3200): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872092.428:3201): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872092.460:3202): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872092.460:3203): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872092.502:3204): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872092.502:3205): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872092.562:3206): pid=30379 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872092.562:3207): pid=30379 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776268737963716A736867776A666A72777A6A746A72616565626F75716A7177203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872092.563:3208): pid=30379 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872092.566:3209): pid=30379 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872092.752:3210): pid=30379 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872092.752:3211): pid=30379 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872092.756:3212): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872092.756:3213): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872092.797:3214): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872092.797:3215): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872092.824:3216): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872092.824:3217): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872092.875:3218): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872092.876:3219): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872092.902:3220): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872092.902:3221): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872092.944:3222): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872092.944:3223): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872092.976:3224): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872092.976:3225): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872093.076:3226): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872093.076:3227): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872093.136:3228): pid=30441 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872093.137:3229): pid=30441 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776D6A6F737378696262797064636F6B67787968676C786A6D7261797865636F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872093.137:3230): pid=30441 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872093.140:3231): pid=30441 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872093.304:3232): pid=30441 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872093.304:3233): pid=30441 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872093.308:3234): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872093.308:3235): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872093.350:3236): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872093.350:3237): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872093.389:3238): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872093.390:3239): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872093.433:3240): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872093.433:3241): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872093.463:3242): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872093.463:3243): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872093.505:3244): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872093.505:3245): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872093.563:3246): pid=30484 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872093.563:3247): pid=30484 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7779676875736B6D6F64736B7A6E65726E70656E6D616F76727779716A727062203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872093.564:3248): pid=30484 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872093.566:3249): pid=30484 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872093.743:3250): pid=30484 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872093.743:3251): pid=30484 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872093.747:3252): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872093.748:3253): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872093.789:3254): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872093.789:3255): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872093.819:3256): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872093.819:3257): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872093.881:3258): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872093.881:3259): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872093.910:3260): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872093.910:3261): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872093.952:3262): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872093.952:3263): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872093.987:3264): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872093.987:3265): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872094.045:3266): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872094.045:3267): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872094.104:3268): pid=30546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872094.104:3269): pid=30546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7278736F6E7477776566656B686961797064696A727578656C797A6C6578706F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872094.105:3270): pid=30546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872094.107:3271): pid=30546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872094.277:3272): pid=30546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872094.278:3273): pid=30546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872094.282:3274): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872094.282:3275): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872094.323:3276): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872094.323:3277): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872094.359:3278): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872094.359:3279): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872094.401:3280): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872094.401:3281): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872094.431:3282): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872094.432:3283): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872094.473:3284): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872094.473:3285): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872094.523:3286): pid=30589 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872094.524:3287): pid=30589 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6A6C6A7A686E627A627179736D746C72717875776A65776A666C6A67617262203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872094.524:3288): pid=30589 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872094.525:3289): pid=30589 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872094.708:3290): pid=30589 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872094.708:3291): pid=30589 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872094.712:3292): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872094.713:3293): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872094.771:3294): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872094.772:3295): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872094.845:3296): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872094.846:3297): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872094.892:3298): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872094.892:3299): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872094.921:3300): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872094.921:3301): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872094.963:3302): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872094.963:3303): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872094.998:3304): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872094.998:3305): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872095.062:3306): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872095.062:3307): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872095.120:3308): pid=30651 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872095.120:3309): pid=30651 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677A67676B69796A6B64646564736D6E6A6F676769636279667A66756462787A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872095.121:3310): pid=30651 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872095.123:3311): pid=30651 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872095.291:3312): pid=30651 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872095.291:3313): pid=30651 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872095.295:3314): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872095.295:3315): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872095.337:3316): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872095.337:3317): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872095.378:3318): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872095.378:3319): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872095.419:3320): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872095.419:3321): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872095.452:3322): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872095.452:3323): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872095.493:3324): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872095.493:3325): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872095.552:3326): pid=30694 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872095.552:3327): pid=30694 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7278716A6B73746F74647871657061766A6A63616F6A76727A696B66687069203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872095.553:3328): pid=30694 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872095.556:3329): pid=30694 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872095.729:3330): pid=30694 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872095.730:3331): pid=30694 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872095.732:3332): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872095.732:3333): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872095.774:3334): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872095.774:3335): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872095.800:3336): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872095.800:3337): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872095.864:3338): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872095.864:3339): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872095.891:3340): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872095.891:3341): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872095.933:3342): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872095.933:3343): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872095.971:3344): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872095.972:3345): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872096.032:3346): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872096.032:3347): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872096.089:3348): pid=30756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872096.089:3349): pid=30756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6176616B6265726166757077737577636D6B746B736C7477797464756D626466203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872096.090:3350): pid=30756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872096.092:3351): pid=30756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872096.261:3352): pid=30756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872096.261:3353): pid=30756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872096.265:3354): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872096.265:3355): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872096.307:3356): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872096.307:3357): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872096.335:3358): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872096.335:3359): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872096.376:3360): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872096.376:3361): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872096.407:3362): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872096.407:3363): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872096.448:3364): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872096.448:3365): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872096.503:3366): pid=30799 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872096.503:3367): pid=30799 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696A746F75676B62687A6670786F686963776D6F756C66756D6E686E77616A70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872096.503:3368): pid=30799 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872096.506:3369): pid=30799 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872096.684:3370): pid=30799 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872096.684:3371): pid=30799 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872096.687:3372): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872096.688:3373): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872096.729:3374): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872096.729:3375): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872096.756:3376): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872096.756:3377): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872096.816:3378): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872096.816:3379): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872096.844:3380): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872096.845:3381): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872096.886:3382): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872096.886:3383): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872096.918:3384): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872096.919:3385): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872096.975:3386): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872096.975:3387): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872097.031:3388): pid=30861 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872097.031:3389): pid=30861 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B666C6F7A6B636C786864677470796C6C726C6475756C72626C6E726A627162203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872097.032:3390): pid=30861 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872097.034:3391): pid=30861 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872097.196:3392): pid=30861 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872097.197:3393): pid=30861 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872097.200:3394): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872097.200:3395): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872097.242:3396): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872097.242:3397): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872097.279:3398): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872097.279:3399): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872097.321:3400): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872097.321:3401): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872097.347:3402): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872097.347:3403): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872097.557:3404): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872097.557:3405): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872097.606:3406): pid=30904 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872097.606:3407): pid=30904 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687262737074656976727A79727869676C71706676776778756972676A666D73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872097.607:3408): pid=30904 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872097.608:3409): pid=30904 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872097.921:3410): pid=30904 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872097.921:3411): pid=30904 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872097.925:3412): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872097.925:3413): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872097.967:3414): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872097.967:3415): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872097.999:3416): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872098.000:3417): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872098.056:3418): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872098.056:3419): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872098.085:3420): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872098.085:3421): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872098.130:3422): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872098.131:3423): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872098.167:3424): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872098.167:3425): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872098.210:3426): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872098.210:3427): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872098.270:3428): pid=30966 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872098.270:3429): pid=30966 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69646B61716663796B676F7977736874726168746F646361687A6C69666D756F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872098.271:3430): pid=30966 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872098.274:3431): pid=30966 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872098.452:3432): pid=30966 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872098.452:3433): pid=30966 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872098.456:3434): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872098.456:3435): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872098.499:3436): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872098.499:3437): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872098.533:3438): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872098.534:3439): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872098.575:3440): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872098.575:3441): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872098.605:3442): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872098.606:3443): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872098.647:3444): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872098.647:3445): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872098.708:3446): pid=31009 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872098.708:3447): pid=31009 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657179686D6E726C63656C6C78796B6D716C746F6F7664627863676172797163203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872098.709:3448): pid=31009 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872098.711:3449): pid=31009 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872098.887:3450): pid=31009 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872098.887:3451): pid=31009 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872098.891:3452): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872098.891:3453): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872098.932:3454): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872098.933:3455): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872098.961:3456): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872098.961:3457): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872099.337:3458): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872099.338:3459): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872099.393:3460): pid=31039 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872099.394:3461): pid=31039 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A65766578636D6B6C766F71637066687170786175686D6D777471767A72736C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872099.394:3462): pid=31039 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872099.396:3463): pid=31039 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872099.565:3464): pid=31039 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872099.565:3465): pid=31039 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872099.568:3466): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872099.568:3467): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872099.816:3468): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872099.816:3469): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872099.848:3470): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872099.848:3471): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872099.892:3472): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872099.892:3473): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872099.928:3474): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872099.929:3475): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872099.970:3476): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872099.970:3477): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872100.029:3478): pid=31087 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872100.029:3479): pid=31087 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68796A6F6874636E6B746B72707672756F7968727869777874716C6174706D70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872100.029:3480): pid=31087 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872100.032:3481): pid=31087 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872100.203:3482): pid=31087 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872100.204:3483): pid=31087 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872100.208:3484): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872100.209:3485): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872100.250:3486): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872100.250:3487): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872100.284:3488): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872100.285:3489): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872100.326:3490): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872100.326:3491): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872100.411:3492): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872100.411:3493): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872100.453:3494): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872100.453:3495): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872100.500:3496): pid=31130 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872100.500:3497): pid=31130 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D647977676E69726673696F686C7A646C61686E6B7676786578656A726D6E75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872100.501:3498): pid=31130 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872100.502:3499): pid=31130 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872100.677:3500): pid=31130 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872100.677:3501): pid=31130 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872100.680:3502): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872100.681:3503): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872100.722:3504): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872100.722:3505): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872100.747:3506): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872100.747:3507): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872105.174:3508): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872105.174:3509): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872105.226:3510): pid=31160 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872105.226:3511): pid=31160 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747A6F79727161716A746363686A73716B6C6D677A7268727361787665676A75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872105.227:3512): pid=31160 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872105.229:3513): pid=31160 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872105.732:3514): pid=31160 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872105.732:3515): pid=31160 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872105.735:3516): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872105.736:3517): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872105.858:3518): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872105.858:3519): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872105.913:3520): pid=31221 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872105.913:3521): pid=31221 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66716967736E6A706A6479647773787878696A6D6D61667279617575736A7A79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872105.914:3522): pid=31221 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872105.916:3523): pid=31221 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872110.167:3524): pid=31221 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872110.167:3525): pid=31221 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872110.171:3526): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872110.172:3527): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872110.320:3528): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872110.320:3529): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872110.381:3530): pid=31238 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872110.381:3531): pid=31238 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B656D6B636164706F6567666F6879696B6467677A726A70757A68746F75676B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872110.383:3532): pid=31238 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872110.386:3533): pid=31238 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872114.672:3534): pid=31238 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872114.672:3535): pid=31238 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872114.675:3536): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872114.675:3537): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872115.465:3538): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872115.465:3539): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872115.526:3540): pid=31255 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872115.526:3541): pid=31255 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686D70696462767166767A72706D627263796B6A71636A72646C6365756C7277203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872115.527:3542): pid=31255 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872115.529:3543): pid=31255 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872115.675:3544): pid=31255 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872115.676:3545): pid=31255 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872115.679:3546): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872115.679:3547): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872115.914:3548): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872115.914:3549): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872115.986:3550): pid=31278 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872115.987:3551): pid=31278 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7172616462726D6A627A6566786471737A706D6D6C676B7577767769666F61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872115.988:3552): pid=31278 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872115.991:3553): pid=31278 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872120.246:3554): pid=31278 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872120.247:3555): pid=31278 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872120.251:3556): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872120.252:3557): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872120.522:3558): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872120.523:3559): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872120.592:3560): pid=31295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872120.592:3561): pid=31295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786D6E746B72686162746E72736769747579736565677A757A7567636F616161203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872120.594:3562): pid=31295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872120.597:3563): pid=31295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872120.783:3564): pid=31295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872120.783:3565): pid=31295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872120.788:3566): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872120.788:3567): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872120.954:3568): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872120.954:3569): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872121.004:3570): pid=31318 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872121.005:3571): pid=31318 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766C6677796E6D756466736F6877776B737A7A7170737975626666756B61736F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872121.005:3572): pid=31318 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872121.008:3573): pid=31318 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872125.271:3574): pid=31318 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872125.272:3575): pid=31318 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872125.276:3576): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872125.276:3577): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872125.403:3578): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872125.403:3579): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872125.461:3580): pid=31336 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872125.462:3581): pid=31336 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777A6B626D6A727A6E6E736365766B6266766172796F686E6E707A7263626C67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872125.462:3582): pid=31336 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872125.465:3583): pid=31336 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872129.774:3584): pid=31336 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872129.774:3585): pid=31336 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872129.778:3586): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872129.778:3587): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872129.967:3588): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872129.967:3589): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872130.030:3590): pid=31353 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872130.030:3591): pid=31353 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767171666C7564766165677168636D646578687467736465736E747261766F6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872130.031:3592): pid=31353 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872130.034:3593): pid=31353 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872130.215:3594): pid=31353 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872130.215:3595): pid=31353 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872130.218:3596): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872130.219:3597): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872130.389:3598): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872130.389:3599): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872130.450:3600): pid=31376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872130.450:3601): pid=31376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74637A6869646573796A75766D67636369737A7969696B70646F737571617170203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872130.451:3602): pid=31376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872130.454:3603): pid=31376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872134.704:3604): pid=31376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872134.704:3605): pid=31376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872134.708:3606): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872134.708:3607): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872134.819:3608): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872134.819:3609): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872134.879:3610): pid=31393 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872134.880:3611): pid=31393 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626C67776F73796F756E74786161746976636F76697861656873736671646965203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872134.880:3612): pid=31393 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872134.883:3613): pid=31393 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872139.155:3614): pid=31393 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872139.155:3615): pid=31393 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872139.159:3616): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872139.159:3617): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872139.335:3618): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872139.335:3619): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872139.395:3620): pid=31410 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872139.395:3621): pid=31410 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6970697363747379676A7A6375687567686C626F6B6B7361636771687A6F7963203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872139.396:3622): pid=31410 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872139.399:3623): pid=31410 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872139.575:3624): pid=31410 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872139.576:3625): pid=31410 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872139.579:3626): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872139.579:3627): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872139.784:3628): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872139.784:3629): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872139.842:3630): pid=31433 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872139.842:3631): pid=31433 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C696C776F636973726C71626B63616F68776D767777657A6D74696A6B6A7676203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872139.843:3632): pid=31433 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872139.845:3633): pid=31433 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872144.047:3634): pid=31433 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872144.047:3635): pid=31433 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872144.051:3636): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872144.051:3637): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872144.159:3638): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872144.159:3639): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872144.220:3640): pid=31450 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872144.220:3641): pid=31450 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636363657775756668777A6B74636463766B64796861726D6A7A6F686A726F64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872144.221:3642): pid=31450 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872144.224:3643): pid=31450 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872148.488:3644): pid=31450 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872148.488:3645): pid=31450 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872148.494:3646): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872148.494:3647): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872168.333:3648): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872168.333:3649): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872168.385:3650): pid=31467 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872168.385:3651): pid=31467 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A656F647A61706E667474736C696272746B697673756A6F74636B666F6A617A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872168.386:3652): pid=31467 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872168.387:3653): pid=31467 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872168.563:3654): pid=31467 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872168.563:3655): pid=31467 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872168.567:3656): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872168.567:3657): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872168.715:3658): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872168.715:3659): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872168.739:3660): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872168.739:3661): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872168.780:3662): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872168.780:3663): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872168.816:3664): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872168.816:3665): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872168.858:3666): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872168.858:3667): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872168.902:3668): pid=31515 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872168.902:3669): pid=31515 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7067736B797A6C75676E616B65796C7568747476696F6E747764717266746E7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872168.903:3670): pid=31515 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872168.906:3671): pid=31515 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872169.092:3672): pid=31515 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872169.093:3673): pid=31515 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872169.096:3674): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872169.096:3675): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872169.138:3676): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872169.138:3677): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872169.181:3678): pid=31533 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872169.181:3679): pid=31533 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616764617A6475776775697877697271736E7767647476717562736F6E716E68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872169.182:3680): pid=31533 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872169.184:3681): pid=31533 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872169.342:3682): pid=31533 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872169.342:3683): pid=31533 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872169.345:3684): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872169.345:3685): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872169.387:3686): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872169.387:3687): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872169.414:3688): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872169.414:3689): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872169.534:3690): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872169.534:3691): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872169.575:3692): pid=31563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872169.575:3693): pid=31563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66686E7276776A7978756D70646E7476776B797262737976746A626372656C6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872169.576:3694): pid=31563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872169.577:3695): pid=31563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872169.721:3696): pid=31563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872169.722:3697): pid=31563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872169.725:3698): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872169.725:3699): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872170.085:3700): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872170.085:3701): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872170.109:3702): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872170.109:3703): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872170.151:3704): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872170.151:3705): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872170.185:3706): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872170.185:3707): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872170.227:3708): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872170.227:3709): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872170.270:3710): pid=31611 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872170.270:3711): pid=31611 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6A61676B7466766C69756362656C7A7A6A78626A6E677768696B6D767A7073203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872170.271:3712): pid=31611 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872170.274:3713): pid=31611 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872170.425:3714): pid=31611 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872170.425:3715): pid=31611 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872170.428:3716): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872170.428:3717): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872170.470:3718): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872170.470:3719): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872170.520:3720): pid=31629 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872170.521:3721): pid=31629 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6676656D64766968736A6E6E796476726464756576756263707675796F7A6F65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872170.521:3722): pid=31629 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872170.524:3723): pid=31629 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872170.672:3724): pid=31629 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872170.672:3725): pid=31629 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872170.676:3726): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872170.676:3727): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872170.718:3728): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872170.718:3729): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872170.752:3730): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872170.752:3731): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872170.853:3732): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872170.853:3733): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872170.884:3734): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872170.884:3735): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872170.926:3736): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872170.926:3737): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872170.960:3738): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872170.961:3739): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872171.023:3740): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872171.023:3741): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872171.083:3742): pid=31691 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872171.084:3743): pid=31691 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72796178646C6572616774776870777561616A636D6679627675677670636C6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872171.084:3744): pid=31691 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872171.087:3745): pid=31691 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872171.264:3746): pid=31691 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872171.265:3747): pid=31691 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872171.269:3748): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872171.269:3749): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872171.311:3750): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872171.311:3751): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872171.358:3752): pid=31709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872171.358:3753): pid=31709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65766D6E6C65736A6467737772787A6768776C6D786F797068716E6A7767706C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872171.359:3754): pid=31709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872171.361:3755): pid=31709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872171.535:3756): pid=31709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872171.536:3757): pid=31709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872171.543:3758): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872171.543:3759): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872171.585:3760): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872171.585:3761): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872171.615:3762): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872171.615:3763): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872171.662:3764): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872171.662:3765): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872171.689:3766): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872171.689:3767): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872171.730:3768): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872171.730:3769): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872171.764:3770): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872171.764:3771): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872171.908:3772): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872171.908:3773): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872171.962:3774): pid=31771 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872171.962:3775): pid=31771 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7A6B756B78706767626E6F746F6B6B6E65727A77687177757073777A657667203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872171.962:3776): pid=31771 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872171.964:3777): pid=31771 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872172.119:3778): pid=31771 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872172.119:3779): pid=31771 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872172.123:3780): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872172.123:3781): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872172.157:3782): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872172.157:3783): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872172.206:3784): pid=31789 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872172.206:3785): pid=31789 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66696566686263716A797666686A63716471616B76636B76667976766E787675203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872172.206:3786): pid=31789 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872172.208:3787): pid=31789 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872172.373:3788): pid=31789 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872172.373:3789): pid=31789 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872172.377:3790): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872172.377:3791): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872172.418:3792): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872172.418:3793): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872172.448:3794): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872172.448:3795): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872172.518:3796): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872172.518:3797): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872172.548:3798): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872172.548:3799): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872172.590:3800): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872172.590:3801): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872172.627:3802): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872172.627:3803): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872172.807:3804): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872172.807:3805): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872172.864:3806): pid=31851 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872172.864:3807): pid=31851 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C637A76797665736F71617974657779767475666466667A6B65676D6D6E7271203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872172.864:3808): pid=31851 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872172.867:3809): pid=31851 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872173.044:3810): pid=31851 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872173.044:3811): pid=31851 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872173.048:3812): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872173.048:3813): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872173.090:3814): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872173.090:3815): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872173.147:3816): pid=31869 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872173.148:3817): pid=31869 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7868706A7961697872707264627561706E617072626869636F6B6E726478696D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872173.149:3818): pid=31869 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872173.152:3819): pid=31869 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872173.323:3820): pid=31869 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872173.323:3821): pid=31869 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872173.327:3822): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872173.327:3823): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872173.400:3824): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872173.400:3825): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872173.430:3826): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872173.430:3827): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872173.480:3828): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872173.480:3829): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872173.508:3830): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872173.508:3831): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872173.550:3832): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872173.550:3833): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872173.588:3834): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872173.588:3835): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872173.630:3836): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872173.630:3837): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872173.690:3838): pid=31931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872173.690:3839): pid=31931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E787665666769667278636C78657A70656D6E646E646F7A646B6E627A706F72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872173.691:3840): pid=31931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872173.693:3841): pid=31931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872173.863:3842): pid=31931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872173.864:3843): pid=31931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872173.868:3844): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872173.868:3845): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872173.900:3846): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872173.900:3847): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872173.953:3848): pid=31949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872173.954:3849): pid=31949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796466796E677664666273637365727379767474697774766479746B6C73616B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872173.954:3850): pid=31949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872173.956:3851): pid=31949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872174.142:3852): pid=31949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872174.142:3853): pid=31949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872174.146:3854): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872174.146:3855): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872174.188:3856): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872174.188:3857): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872174.217:3858): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872174.217:3859): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872174.292:3860): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872174.292:3861): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872174.323:3862): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872174.323:3863): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872174.365:3864): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872174.365:3865): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872174.402:3866): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872174.402:3867): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872174.477:3868): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872174.477:3869): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872174.537:3870): pid=32011 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872174.537:3871): pid=32011 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61767279716B636A6570746272777277736F716F7370696E7966676B69706864203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872174.538:3872): pid=32011 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872174.540:3873): pid=32011 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872174.713:3874): pid=32011 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872174.714:3875): pid=32011 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872174.719:3876): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872174.719:3877): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872174.760:3878): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872174.760:3879): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872174.815:3880): pid=32029 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872174.815:3881): pid=32029 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616C70787575616D7476646A6B7966796D717577666763786A64796D65666470203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872174.815:3882): pid=32029 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872174.817:3883): pid=32029 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872174.994:3884): pid=32029 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872174.994:3885): pid=32029 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872174.998:3886): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872174.998:3887): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872175.040:3888): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872175.040:3889): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872175.067:3890): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872175.067:3891): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872175.114:3892): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872175.114:3893): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872175.142:3894): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872175.143:3895): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872175.184:3896): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872175.184:3897): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872175.220:3898): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872175.221:3899): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872175.284:3900): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872175.284:3901): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872175.328:3902): pid=32091 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872175.329:3903): pid=32091 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7663707777677A6B7476707A65796673616162736F63736D6567747A72727664203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872175.329:3904): pid=32091 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872175.332:3905): pid=32091 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872175.470:3906): pid=32091 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872175.471:3907): pid=32091 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872175.475:3908): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872175.475:3909): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872175.517:3910): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872175.517:3911): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872175.566:3912): pid=32109 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872175.566:3913): pid=32109 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61707274686D626A7161736174626A72656E6C61636279776B717675686E7764203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872175.567:3914): pid=32109 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872175.569:3915): pid=32109 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872175.703:3916): pid=32109 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872175.703:3917): pid=32109 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872175.707:3918): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872175.707:3919): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872175.749:3920): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872175.749:3921): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872175.776:3922): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872175.777:3923): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872175.837:3924): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872175.837:3925): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872175.862:3926): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872175.862:3927): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872175.905:3928): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872175.905:3929): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872175.934:3930): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872175.934:3931): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872176.001:3932): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872176.001:3933): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872176.060:3934): pid=32171 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872176.060:3935): pid=32171 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79636561706F7670707675646F7A6C77617161786C646F797877786C7A7A696D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872176.061:3936): pid=32171 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872176.064:3937): pid=32171 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872176.239:3938): pid=32171 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872176.240:3939): pid=32171 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872176.243:3940): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872176.243:3941): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872176.285:3942): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872176.285:3943): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872176.339:3944): pid=32189 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872176.339:3945): pid=32189 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766769787374787A736B717269676F7A6179787675646263696E687866776576203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872176.339:3946): pid=32189 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872176.341:3947): pid=32189 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872176.494:3948): pid=32189 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872176.494:3949): pid=32189 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872176.497:3950): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872176.498:3951): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872176.539:3952): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872176.539:3953): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872176.575:3954): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872176.575:3955): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872176.622:3956): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872176.622:3957): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872176.657:3958): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872176.657:3959): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872176.698:3960): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872176.698:3961): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872176.732:3962): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872176.732:3963): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872176.804:3964): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872176.805:3965): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872176.866:3966): pid=32251 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872176.866:3967): pid=32251 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75796575746A626C6F6E636F636B7772747963766779776D646B62726F6F7078203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872176.867:3968): pid=32251 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872176.869:3969): pid=32251 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872177.031:3970): pid=32251 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872177.031:3971): pid=32251 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872177.034:3972): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872177.035:3973): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872177.076:3974): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872177.076:3975): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872177.132:3976): pid=32269 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872177.132:3977): pid=32269 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6579746B7879777768636D757A69666F64637469626274626962787761696568203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872177.133:3978): pid=32269 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872177.134:3979): pid=32269 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872177.309:3980): pid=32269 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872177.309:3981): pid=32269 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872177.312:3982): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872177.312:3983): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872177.354:3984): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872177.354:3985): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872177.382:3986): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872177.382:3987): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872177.429:3988): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872177.430:3989): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872177.460:3990): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872177.460:3991): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872177.502:3992): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872177.502:3993): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872177.541:3994): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872177.542:3995): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872177.590:3996): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872177.591:3997): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872177.649:3998): pid=32331 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872177.649:3999): pid=32331 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696A776E756F6D71707878697463716E67677A64686266776463737267786D77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872177.650:4000): pid=32331 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872177.652:4001): pid=32331 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872177.832:4002): pid=32331 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872177.833:4003): pid=32331 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872177.837:4004): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872177.837:4005): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872177.866:4006): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872177.866:4007): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872177.928:4008): pid=32349 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872177.928:4009): pid=32349 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75776C777561707A6C6C71747573747A766D766A6C796F6363706B6A656A776D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872177.929:4010): pid=32349 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872177.947:4011): pid=32349 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872178.087:4012): pid=32349 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872178.087:4013): pid=32349 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872178.091:4014): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872178.091:4015): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872178.132:4016): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872178.132:4017): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872178.161:4018): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872178.161:4019): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872178.215:4020): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872178.215:4021): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872178.245:4022): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872178.245:4023): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872178.287:4024): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872178.287:4025): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872178.316:4026): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872178.317:4027): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872178.379:4028): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872178.380:4029): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872178.436:4030): pid=32411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872178.436:4031): pid=32411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726D7564787968696F73666961706975646867706D796F6C6D6F7A6C666B7868203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872178.437:4032): pid=32411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872178.441:4033): pid=32411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872178.594:4034): pid=32411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872178.594:4035): pid=32411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872178.598:4036): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872178.598:4037): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872178.640:4038): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872178.640:4039): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872178.699:4040): pid=32429 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872178.700:4041): pid=32429 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6E66637775687471796771776A6870787566687A7674627563646D6D687769203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872178.700:4042): pid=32429 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872178.703:4043): pid=32429 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872178.881:4044): pid=32429 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872178.881:4045): pid=32429 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872178.885:4046): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872178.885:4047): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872178.928:4048): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872178.928:4049): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872178.957:4050): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872178.957:4051): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872179.167:4052): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872179.167:4053): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872179.222:4054): pid=32459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872179.222:4055): pid=32459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A716E6162647574707262756273686A7069707263637276666F6E62637A7568203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872179.222:4056): pid=32459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872179.224:4057): pid=32459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872179.385:4058): pid=32459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872179.386:4059): pid=32459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872179.389:4060): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872179.389:4061): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872179.654:4062): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872179.654:4063): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872179.680:4064): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872179.681:4065): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872179.722:4066): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872179.722:4067): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872179.757:4068): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872179.757:4069): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872179.798:4070): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872179.798:4071): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872179.850:4072): pid=32507 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872179.850:4073): pid=32507 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D617179776C76667075777A626268726A62656E617874746B69767A627070766D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872179.850:4074): pid=32507 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872179.852:4075): pid=32507 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872180.028:4076): pid=32507 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872180.029:4077): pid=32507 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872180.032:4078): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872180.032:4079): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872180.074:4080): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872180.074:4081): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872180.123:4082): pid=32525 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872180.123:4083): pid=32525 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F646879757176617371716A797977636F6D6A77776E6B76716C69636D646B65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872180.123:4084): pid=32525 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872180.125:4085): pid=32525 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872180.300:4086): pid=32525 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872180.301:4087): pid=32525 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872180.305:4088): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872180.305:4089): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872180.346:4090): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872180.346:4091): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872180.377:4092): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872180.377:4093): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872183.006:4094): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872183.006:4095): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872183.053:4096): pid=32555 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872183.053:4097): pid=32555 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6163656A6F7165617865707A6F7A6C75746F706261746D707977696668717966203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872183.054:4098): pid=32555 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872183.056:4099): pid=32555 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872185.968:4100): pid=32555 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872185.968:4101): pid=32555 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872185.972:4102): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872185.972:4103): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872187.361:4104): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872187.361:4105): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872187.421:4106): pid=32572 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872187.421:4107): pid=32572 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78706171636C6276726C67706476776B7773776D75786D73786E70726A657276203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872187.422:4108): pid=32572 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872187.424:4109): pid=32572 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872187.700:4110): pid=32572 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872187.700:4111): pid=32572 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872187.704:4112): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872187.704:4113): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872187.764:4114): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872187.765:4115): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872187.825:4116): pid=32590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872187.825:4117): pid=32590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77616174616A6F63747175756764706E67616A6D656179687267747772796676203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872187.826:4118): pid=32590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872187.828:4119): pid=32590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872188.145:4120): pid=32590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872188.146:4121): pid=32590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872188.149:4122): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872188.149:4123): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872188.282:4124): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872188.282:4125): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872188.337:4126): pid=32608 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872188.337:4127): pid=32608 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68616F6E62676B6E6E6567736372726269686574667269796F6D7A6B75756975203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872188.338:4128): pid=32608 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872188.340:4129): pid=32608 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872188.805:4130): prog-id=145 op=LOAD
type=BPF msg=audit(1765872188.805:4131): prog-id=146 op=LOAD
type=BPF msg=audit(1765872188.805:4132): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872188.805:4133): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872188.806:4134): prog-id=147 op=LOAD
type=BPF msg=audit(1765872188.806:4135): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872188.808:4136): prog-id=148 op=LOAD
type=BPF msg=audit(1765872188.808:4137): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872188.809:4138): prog-id=149 op=LOAD
type=BPF msg=audit(1765872188.809:4139): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872188.809:4140): prog-id=150 op=LOAD
type=BPF msg=audit(1765872188.809:4141): prog-id=151 op=LOAD
type=BPF msg=audit(1765872188.809:4142): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872188.809:4143): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872188.811:4144): prog-id=152 op=LOAD
type=BPF msg=audit(1765872188.811:4145): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872188.811:4146): prog-id=153 op=LOAD
type=BPF msg=audit(1765872188.811:4147): prog-id=154 op=LOAD
type=BPF msg=audit(1765872188.811:4148): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872188.811:4149): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765872188.876:4150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=nftables comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872188.906:4151): pid=32608 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872188.906:4152): pid=32608 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872188.910:4153): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872188.910:4154): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872189.262:4155): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872189.262:4156): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872189.292:4157): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872189.292:4158): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872189.334:4159): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872189.334:4160): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872189.369:4161): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872189.369:4162): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872189.410:4163): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872189.410:4164): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872189.467:4165): pid=32698 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872189.467:4166): pid=32698 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7A63626274646378667063747676686A767878706566796676617964747768203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872189.468:4167): pid=32698 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872189.472:4168): pid=32698 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872189.629:4169): pid=32698 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872189.629:4170): pid=32698 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872189.633:4171): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872189.633:4172): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872189.675:4173): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872189.675:4174): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872189.713:4175): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872189.713:4176): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872189.755:4177): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872189.755:4178): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872189.786:4179): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872189.786:4180): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872189.828:4181): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872189.828:4182): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872189.889:4183): pid=32741 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872189.889:4184): pid=32741 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6A627A6D676D687471766B6A726164786D7A79776C7867666E696A78756E70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872189.890:4185): pid=32741 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872189.892:4186): pid=32741 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872190.067:4187): pid=32741 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872190.068:4188): pid=32741 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872190.072:4189): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872190.072:4190): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872190.102:4191): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872190.102:4192): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872190.133:4193): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872190.133:4194): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872190.245:4195): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872190.245:4196): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872190.302:4197): pid=32771 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872190.302:4198): pid=32771 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7577717A746D616D6D63687566686569646F617A66686D6C79646D7A767A766B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872190.302:4199): pid=32771 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872190.305:4200): pid=32771 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=NETFILTER_CFG msg=audit(1765872190.463:4201): table=filter:2 family=10 entries=4 op=nft_register_chain pid=32774 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1765872190.463:4201): table=raw:2 family=10 entries=3 op=nft_register_chain pid=32774 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1765872190.463:4201): table=nat:2 family=2 entries=5 op=nft_register_chain pid=32774 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1765872190.463:4201): table=raw:2 family=2 entries=3 op=nft_register_chain pid=32774 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1765872190.463:4201): table=filter:2 family=2 entries=4 op=nft_register_chain pid=32774 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1765872190.463:4201): table=nat:2 family=1 entries=5 op=nft_register_chain pid=32774 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1765872190.463:4201): table=raw:2 family=1 entries=3 op=nft_register_chain pid=32774 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1765872190.463:4201): table=filter:2 family=1 entries=4 op=nft_register_chain pid=32774 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=SYSCALL msg=audit(1765872190.463:4201): arch=c000003e syscall=46 success=yes exit=2212 a0=3 a1=7ffdf1eeafe0 a2=0 a3=7fd77fd5bbc4 items=0 ppid=32773 pid=32774 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872190.463:4201): proctitle=6E6674002D66002F6574632F6E667461626C65732F69707461626C65732E6E6674
type=USER_END msg=audit(1765872190.497:4202): pid=32771 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872190.498:4203): pid=32771 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872190.502:4204): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872190.502:4205): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872190.738:4206): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872190.738:4207): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872190.797:4208): pid=32789 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872190.797:4209): pid=32789 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D74756163646C766E746A626772796D61716C6F77667469747764786B636D62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872190.798:4210): pid=32789 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872190.800:4211): pid=32789 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872190.985:4212): pid=32789 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872190.985:4213): pid=32789 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872190.989:4214): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872190.989:4215): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872191.091:4216): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872191.091:4217): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872191.121:4218): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872191.121:4219): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872191.163:4220): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872191.163:4221): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872191.197:4222): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872191.197:4223): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872191.301:4224): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872191.301:4225): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872191.351:4226): pid=32838 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872191.352:4227): pid=32838 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776B75776E6E6E7266796461617465647167726668627066647072657A7A6C64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872191.352:4228): pid=32838 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872191.354:4229): pid=32838 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872191.522:4230): pid=32838 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872191.522:4231): pid=32838 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872191.525:4232): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872191.525:4233): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872191.567:4234): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872191.567:4235): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872191.601:4236): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872191.601:4237): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872191.642:4238): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872191.642:4239): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872191.672:4240): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872191.672:4241): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872191.714:4242): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872191.714:4243): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872191.767:4244): pid=32881 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872191.767:4245): pid=32881 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716A6D777177697A687A7165667275756873736C74716A6471776B6869726E62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872191.768:4246): pid=32881 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872191.770:4247): pid=32881 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872191.956:4248): pid=32881 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872191.956:4249): pid=32881 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872191.960:4250): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872191.960:4251): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872192.001:4252): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872192.001:4253): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872192.029:4254): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872192.030:4255): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872192.117:4256): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872192.117:4257): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872192.149:4258): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872192.149:4259): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872192.191:4260): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872192.191:4261): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872192.229:4262): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872192.229:4263): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872192.376:4264): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872192.376:4265): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872192.435:4266): pid=32943 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872192.436:4267): pid=32943 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667A6B6A6875626C666C6678746D6971756D70717A7374656E687278716D7A64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872192.436:4268): pid=32943 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872192.439:4269): pid=32943 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872192.604:4270): pid=32943 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872192.605:4271): pid=32943 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872192.608:4272): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872192.608:4273): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872192.650:4274): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872192.650:4275): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872192.680:4276): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872192.680:4277): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872192.722:4278): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872192.722:4279): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872192.748:4280): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872192.748:4281): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872192.790:4282): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872192.790:4283): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872192.852:4284): pid=32986 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872192.853:4285): pid=32986 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616E64636D636A63737067637374656F647369796176696E7466687673696674203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872192.854:4286): pid=32986 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872192.857:4287): pid=32986 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872193.046:4288): pid=32986 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872193.046:4289): pid=32986 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872193.059:4290): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872193.059:4291): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872193.101:4292): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872193.101:4293): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872193.130:4294): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872193.130:4295): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872193.223:4296): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872193.224:4297): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872193.254:4298): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872193.254:4299): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872193.296:4300): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872193.296:4301): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872193.334:4302): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872193.334:4303): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872193.383:4304): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872193.384:4305): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872193.442:4306): pid=33048 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872193.443:4307): pid=33048 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69756C74686872676C67656F6E726266626C6E786965627A6979686778736F79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872193.443:4308): pid=33048 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872193.446:4309): pid=33048 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872193.613:4310): pid=33048 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872193.614:4311): pid=33048 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872193.617:4312): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872193.617:4313): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872193.659:4314): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872193.659:4315): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872193.694:4316): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872193.695:4317): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872193.736:4318): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872193.736:4319): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872193.765:4320): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872193.765:4321): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872193.807:4322): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872193.807:4323): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872193.857:4324): pid=33091 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872193.857:4325): pid=33091 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6969716771766376677376796D75626C7969796475736173637279746267616E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872193.858:4326): pid=33091 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872193.859:4327): pid=33091 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872193.999:4328): pid=33091 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872194.000:4329): pid=33091 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872194.003:4330): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872194.003:4331): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872194.045:4332): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872194.045:4333): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872194.074:4334): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872194.074:4335): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872194.167:4336): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872194.167:4337): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872194.198:4338): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872194.198:4339): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872194.240:4340): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872194.240:4341): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872194.276:4342): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872194.277:4343): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872194.332:4344): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872194.333:4345): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872194.394:4346): pid=33153 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872194.394:4347): pid=33153 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636973746C6D7077726E677269746F6D686D61766A69796E6867786E6767797A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872194.394:4348): pid=33153 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872194.397:4349): pid=33153 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872194.535:4350): pid=33153 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872194.535:4351): pid=33153 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872194.539:4352): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872194.539:4353): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872194.581:4354): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872194.581:4355): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872194.616:4356): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872194.616:4357): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872194.658:4358): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872194.658:4359): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872194.688:4360): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872194.688:4361): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872194.730:4362): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872194.730:4363): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872194.787:4364): pid=33196 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872194.788:4365): pid=33196 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627A696D68757A616B776C6863736B696A70786E61726A6B696578666B707A64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872194.788:4366): pid=33196 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872194.791:4367): pid=33196 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872194.967:4368): pid=33196 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872194.968:4369): pid=33196 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872194.971:4370): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872194.971:4371): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872195.014:4372): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872195.014:4373): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872195.041:4374): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872195.041:4375): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872195.125:4376): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872195.125:4377): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872195.153:4378): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872195.153:4379): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872195.194:4380): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872195.194:4381): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872195.229:4382): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872195.229:4383): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872195.722:4384): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872195.722:4385): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872195.778:4386): pid=33258 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872195.778:4387): pid=33258 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64686D766268636D646B776F736F74747A787876796A6766727171746467686A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872195.779:4388): pid=33258 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872195.780:4389): pid=33258 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872195.952:4390): pid=33258 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872195.952:4391): pid=33258 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872195.955:4392): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872195.955:4393): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872196.000:4394): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872196.000:4395): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872196.036:4396): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872196.037:4397): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872196.078:4398): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872196.078:4399): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872196.107:4400): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872196.107:4401): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872196.150:4402): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872196.150:4403): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872196.209:4404): pid=33301 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872196.209:4405): pid=33301 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7569757774666B6D696261747A626E766670787763726C796E79696D6B616374203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872196.210:4406): pid=33301 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872196.213:4407): pid=33301 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872196.385:4408): pid=33301 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872196.385:4409): pid=33301 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872196.389:4410): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872196.389:4411): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872196.431:4412): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872196.431:4413): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872196.460:4414): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872196.461:4415): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872196.557:4416): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872196.557:4417): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872196.613:4418): pid=33331 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872196.613:4419): pid=33331 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726F6E687777716264666F7162766A7578656C63626C796A717A70636E6D6672203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872196.614:4420): pid=33331 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872196.616:4421): pid=33331 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872197.153:4422): pid=33331 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872197.153:4423): pid=33331 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872197.157:4424): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872197.157:4425): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872197.237:4426): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872197.237:4427): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872197.288:4428): pid=33396 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872197.288:4429): pid=33396 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64647A6E686D6E706E727766766B75617A67656462666A6B6C71677561747772203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872197.289:4430): pid=33396 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872197.291:4431): pid=33396 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872197.482:4432): pid=33396 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872197.483:4433): pid=33396 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872197.487:4434): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872197.487:4435): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872197.647:4436): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872197.648:4437): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872197.707:4438): pid=33413 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872197.707:4439): pid=33413 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6266626A686F7A61696D616F786A627163677267666464796C7A676365626277203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872197.708:4440): pid=33413 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872197.710:4441): pid=33413 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=NETFILTER_CFG msg=audit(1765872197.878:4442): table=raw:3 family=1 entries=2 op=nft_register_chain pid=33416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1765872197.878:4442): table=filter:3 family=1 entries=1 op=nft_register_chain pid=33416 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=SYSCALL msg=audit(1765872197.878:4442): arch=c000003e syscall=46 success=yes exit=192 a0=3 a1=7ffdd0913ec0 a2=0 a3=7fd9bb1eebc4 items=0 ppid=33415 pid=33416 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872197.878:4442): proctitle=6E6674002D66002F6574632F6E667461626C65732F747269706C656F2D636861696E732E6E6674
type=USER_END msg=audit(1765872197.890:4443): pid=33413 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872197.890:4444): pid=33413 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872197.894:4445): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872197.894:4446): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872198.046:4447): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872198.046:4448): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872198.106:4449): pid=33430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872198.106:4450): pid=33430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65637A75756C656679686D6E7275687161716C64676B6F6D63796A6569646571203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872198.107:4451): pid=33430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872198.109:4452): pid=33430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=NETFILTER_CFG msg=audit(1765872198.241:4453): table=raw:4 family=1 entries=4 op=nft_register_rule pid=33435 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=NETFILTER_CFG msg=audit(1765872198.241:4453): table=filter:4 family=1 entries=30 op=nft_register_chain pid=33435 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=SYSCALL msg=audit(1765872198.241:4453): arch=c000003e syscall=46 success=yes exit=9864 a0=3 a1=7ffe86110290 a2=0 a3=7f474e8cdbc4 items=0 ppid=33433 pid=33435 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872198.241:4453): proctitle=6E6674002D66002D
type=USER_END msg=audit(1765872198.255:4454): pid=33430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872198.255:4455): pid=33430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872198.260:4456): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872198.260:4457): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872198.408:4458): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872198.409:4459): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872198.463:4460): pid=33449 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872198.464:4461): pid=33449 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7065747A646A6974626E7A6F6367646F6B616971696D61747968697966786169203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872198.464:4462): pid=33449 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872198.465:4463): pid=33449 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872198.634:4464): pid=33449 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872198.634:4465): pid=33449 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872198.637:4466): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872198.638:4467): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872198.673:4468): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872198.673:4469): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872198.733:4470): pid=33465 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872198.733:4471): pid=33465 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636C6A716F6763796D63736E686A6C7974646667716C7474797164756A61676E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872198.734:4472): pid=33465 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872198.736:4473): pid=33465 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872198.925:4474): pid=33465 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872198.925:4475): pid=33465 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872198.929:4476): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872198.929:4477): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872199.066:4478): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872199.066:4479): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872199.129:4480): pid=33481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872199.129:4481): pid=33481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7461677777786D63746F74737471707A7663736C6A7469656375656A616A7776203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872199.130:4482): pid=33481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872199.133:4483): pid=33481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872199.335:4484): pid=33481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872199.335:4485): pid=33481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872199.338:4486): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872199.338:4487): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872199.455:4488): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872199.455:4489): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872199.509:4490): pid=33497 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872199.509:4491): pid=33497 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647467736769736D617A7264666A776E656F6E637379626B776364777177746D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872199.510:4492): pid=33497 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872199.511:4493): pid=33497 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872199.844:4494): bool=virt_sandbox_use_netlink val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=SYSCALL msg=audit(1765872199.844:4494): arch=c000003e syscall=1 success=yes exit=2 a0=5 a1=7ffffce53b0e a2=2 a3=0 items=0 ppid=33497 pid=33499 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="python3" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872199.844:4494): proctitle="/usr/bin/python3"
type=USER_END msg=audit(1765872200.415:4495): pid=33497 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872200.415:4496): pid=33497 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872200.420:4497): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872200.420:4498): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872200.584:4499): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872200.584:4500): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872200.651:4501): pid=33517 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872200.651:4502): pid=33517 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6764716E786A73707076696369656C67736F74776470736F62757A6C6B6A6E68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872200.652:4503): pid=33517 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872200.661:4504): pid=33517 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_POLICY_LOAD msg=audit(1765872201.615:4505): auid=1002 ses=14 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1765872201.615:4505): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7f2c37a00000 a2=36aa51 a3=0 items=0 ppid=33519 pid=33524 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872201.615:4505): proctitle="/sbin/load_policy"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872201.760:4506): pid=33519 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/etc/iscsi(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1765872201.799:4507): pid=33517 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872201.799:4508): pid=33517 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872201.804:4509): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872201.804:4510): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872201.848:4511): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872201.848:4512): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872201.904:4513): pid=33538 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872201.904:4514): pid=33538 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62727162796E7169626A616664746E73656161716279616B62756975737A6E65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872201.905:4515): pid=33538 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872201.911:4516): pid=33538 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_POLICY_LOAD msg=audit(1765872202.863:4517): auid=1002 ses=14 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1765872202.863:4517): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7ff89be00000 a2=36aa51 a3=0 items=0 ppid=33540 pid=33545 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872202.863:4517): proctitle="/sbin/load_policy"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872203.012:4518): pid=33540 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=modify tglob="/etc/target(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1765872203.059:4519): pid=33538 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872203.060:4520): pid=33538 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872203.066:4521): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872203.066:4522): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872203.131:4523): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872203.131:4524): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872203.185:4525): pid=33559 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872203.185:4526): pid=33559 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666B70646E6C697477766B6876737074696167666F6F7A64657569636C73677A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872203.186:4527): pid=33559 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872203.190:4528): pid=33559 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_POLICY_LOAD msg=audit(1765872204.204:4529): auid=1002 ses=14 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1765872204.204:4529): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7fa1db400000 a2=36aa51 a3=0 items=0 ppid=33561 pid=33566 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872204.204:4529): proctitle="/sbin/load_policy"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872204.397:4530): pid=33561 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=modify tglob="/var/lib/iscsi(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1765872204.450:4531): pid=33559 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872204.450:4532): pid=33559 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872204.456:4533): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872204.456:4534): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872204.568:4535): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872204.569:4536): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872204.632:4537): pid=33580 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872204.632:4538): pid=33580 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68616A70777268796D6966616D777464616F76747469736F677A7A6C7464657A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872204.633:4539): pid=33580 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872204.640:4540): pid=33580 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872204.817:4541): pid=33580 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872204.817:4542): pid=33580 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872204.820:4543): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872204.820:4544): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872204.870:4545): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872204.870:4546): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872204.931:4547): pid=33596 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872204.931:4548): pid=33596 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A76666E6A6C6B6C63786D6C747079746F72717A6F717262747A687465727569203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872204.932:4549): pid=33596 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872204.935:4550): pid=33596 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872205.104:4551): pid=33596 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872205.105:4552): pid=33596 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872205.110:4553): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872205.110:4554): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872205.174:4555): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872205.174:4556): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872205.226:4557): pid=33612 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872205.226:4558): pid=33612 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7376727567616C77746C6C756862617175627672677168646866797A706C686D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872205.226:4559): pid=33612 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872205.228:4560): pid=33612 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872205.380:4561): pid=33612 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872205.381:4562): pid=33612 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872205.384:4563): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872205.384:4564): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872205.515:4565): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872205.515:4566): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872205.576:4567): pid=33628 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872205.576:4568): pid=33628 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68716C70716379627969686378776B6C716574746867777A64736274736F7062203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872205.577:4569): pid=33628 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872205.579:4570): pid=33628 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872205.749:4571): pid=33628 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872205.749:4572): pid=33628 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872205.752:4573): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872205.752:4574): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872205.863:4575): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872205.864:4576): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872205.917:4577): pid=33644 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872205.918:4578): pid=33644 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F627963786C6264737578786E7269627A7277627864756F636A697278717173203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872205.918:4579): pid=33644 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872205.921:4580): pid=33644 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872206.098:4581): pid=33644 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872206.098:4582): pid=33644 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872206.100:4583): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872206.100:4584): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872206.365:4585): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872206.365:4586): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872206.420:4587): pid=33661 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872206.421:4588): pid=33661 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7A6B6778726E74737A636F7A7A6C6474736967786A69796567736C676D7374203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872206.421:4589): pid=33661 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872206.424:4590): pid=33661 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872209.202:4591): pid=33663 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=remove sw="dracut-config-generic-057-21.git20230214.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1765872209.976:4592): pid=33661 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872209.977:4593): pid=33661 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872209.981:4594): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872209.981:4595): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872210.069:4596): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872210.069:4597): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872210.132:4598): pid=33678 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872210.133:4599): pid=33678 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75766B746C7A6F66686E6A6E6B706674676D6B6D616F716C6A6C6D7968627A67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872210.133:4600): pid=33678 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872210.136:4601): pid=33678 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872210.313:4602): pid=33678 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872210.313:4603): pid=33678 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872210.317:4604): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872210.317:4605): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872210.406:4606): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872210.406:4607): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872210.437:4608): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872210.438:4609): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872210.479:4610): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872210.479:4611): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872210.516:4612): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872210.516:4613): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872210.568:4614): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872210.568:4615): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872210.619:4616): pid=33726 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872210.619:4617): pid=33726 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6669706A6A61616E687673696E7169697063756B66646671666261637A73786C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872210.620:4618): pid=33726 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872210.622:4619): pid=33726 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872210.793:4620): pid=33726 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872210.793:4621): pid=33726 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872210.797:4622): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872210.797:4623): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872210.839:4624): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872210.839:4625): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872210.873:4626): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872210.874:4627): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872210.915:4628): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872210.915:4629): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872210.944:4630): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872210.944:4631): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872210.986:4632): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872210.986:4633): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872211.044:4634): pid=33769 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872211.044:4635): pid=33769 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6663787966727174787573797A7966716E6873776773676D6D676C6C67646871203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872211.045:4636): pid=33769 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872211.048:4637): pid=33769 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872211.225:4638): pid=33769 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872211.226:4639): pid=33769 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872211.229:4640): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872211.230:4641): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872211.271:4642): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872211.271:4643): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872211.293:4644): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872211.293:4645): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872211.387:4646): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872211.388:4647): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872211.439:4648): pid=33799 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872211.439:4649): pid=33799 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6F6C76766E676964696F7477656A6172746D67766668797A73656B75746C76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872211.440:4650): pid=33799 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872211.442:4651): pid=33799 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765872211.715:4652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872211.783:4653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872211.803:4654): pid=33799 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872211.803:4655): pid=33799 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872211.807:4656): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872211.807:4657): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872211.907:4658): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872211.908:4659): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872211.937:4660): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872211.937:4661): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872211.979:4662): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872211.979:4663): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872212.013:4664): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872212.013:4665): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872212.065:4666): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872212.065:4667): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872212.121:4668): pid=33853 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872212.121:4669): pid=33853 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E616875646E6C67756E6D7565616477797574796F62697A6B7A6369697A7361203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872212.121:4670): pid=33853 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872212.123:4671): pid=33853 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872212.282:4672): pid=33853 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872212.282:4673): pid=33853 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872212.285:4674): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872212.285:4675): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872212.328:4676): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872212.329:4677): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872212.363:4678): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872212.363:4679): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872212.405:4680): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872212.405:4681): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872212.435:4682): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872212.435:4683): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872212.477:4684): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872212.477:4685): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872212.522:4686): pid=33896 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872212.522:4687): pid=33896 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66687A667A6F6D6A756A686C79647866746D646D666472786D796B6D75717370203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872212.523:4688): pid=33896 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872212.525:4689): pid=33896 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872212.673:4690): pid=33896 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872212.673:4691): pid=33896 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872212.677:4692): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872212.677:4693): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872212.719:4694): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872212.719:4695): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872212.748:4696): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872212.748:4697): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872213.009:4698): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872213.009:4699): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872213.071:4700): pid=33926 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872213.071:4701): pid=33926 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776E77716D6F6264646A73746E7669616E63657A676765666872787478656772203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872213.072:4702): pid=33926 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872213.075:4703): pid=33926 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872213.271:4704): pid=33926 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872213.272:4705): pid=33926 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872213.275:4706): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872213.276:4707): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872213.351:4708): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872213.352:4709): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872213.417:4710): pid=33944 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872213.417:4711): pid=33944 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7069706F71686B74637978627A6E6765766F6E666E65696A756B71716D7579203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872213.418:4712): pid=33944 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872213.420:4713): pid=33944 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872213.597:4714): pid=33944 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872213.598:4715): pid=33944 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872213.601:4716): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872213.601:4717): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872213.677:4718): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872213.677:4719): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872213.732:4720): pid=33962 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872213.732:4721): pid=33962 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E78707464786C727267686668697362676775797861666F646274617A6F7272203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872213.733:4722): pid=33962 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872213.735:4723): pid=33962 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872213.916:4724): pid=33962 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872213.916:4725): pid=33962 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872213.925:4726): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872213.925:4727): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872214.003:4728): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872214.003:4729): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872214.056:4730): pid=33980 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872214.056:4731): pid=33980 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7276686F62746D626563717166666C66667A61677179726464687563676279203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872214.057:4732): pid=33980 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872214.059:4733): pid=33980 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872214.214:4734): pid=33980 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872214.214:4735): pid=33980 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872214.218:4736): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872214.218:4737): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872214.291:4738): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872214.291:4739): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872214.348:4740): pid=33997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872214.348:4741): pid=33997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61646970666574747A6E72786766656C68696B67737970726A687776716E6C70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872214.349:4742): pid=33997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872214.351:4743): pid=33997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872214.527:4744): pid=33997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872214.527:4745): pid=33997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872214.532:4746): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872214.532:4747): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872214.593:4748): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872214.593:4749): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872214.648:4750): pid=34014 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872214.648:4751): pid=34014 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7671636277696D707967786E776F706B7A746A757A7361667A7571646D676678203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872214.648:4752): pid=34014 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872214.650:4753): pid=34014 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872214.838:4754): pid=34014 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872214.838:4755): pid=34014 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872214.842:4756): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872214.842:4757): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872214.915:4758): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872214.916:4759): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872214.967:4760): pid=34031 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872214.967:4761): pid=34031 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676F6C63776C66666E77787861766A65726977666775726378716D7064766F77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872214.967:4762): pid=34031 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872214.970:4763): pid=34031 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872215.155:4764): pid=34031 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872215.155:4765): pid=34031 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872215.159:4766): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872215.159:4767): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872215.214:4768): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872215.214:4769): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872215.255:4770): pid=34049 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872215.256:4771): pid=34049 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6874616B697A6871736A6F6D716A717271756A666363766678676569797179203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872215.256:4772): pid=34049 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872215.259:4773): pid=34049 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872215.444:4774): pid=34049 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872215.444:4775): pid=34049 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872215.447:4776): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872215.447:4777): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872215.522:4778): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872215.522:4779): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872215.570:4780): pid=34067 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872215.570:4781): pid=34067 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626C7A61656F736C6471786E6275706E7373726761776F6C68777A6566647668203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872215.570:4782): pid=34067 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872215.572:4783): pid=34067 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872215.742:4784): pid=34067 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872215.743:4785): pid=34067 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872215.746:4786): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872215.746:4787): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872215.818:4788): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872215.818:4789): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872215.871:4790): pid=34085 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872215.871:4791): pid=34085 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67637A69796D66796D6977686C706C7A6465776661796661767267736C7A7376203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872215.872:4792): pid=34085 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872215.874:4793): pid=34085 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872216.056:4794): pid=34085 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872216.056:4795): pid=34085 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872216.059:4796): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872216.059:4797): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872216.132:4798): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872216.133:4799): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872216.186:4800): pid=34103 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872216.186:4801): pid=34103 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D707171697A66616D6F6A74616B6F7766656E79616E77676262676369626171203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872216.186:4802): pid=34103 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872216.896:4803): pid=34103 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872217.055:4804): pid=34103 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872217.056:4805): pid=34103 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872217.061:4806): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872217.061:4807): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872217.135:4808): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872217.135:4809): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872217.193:4810): pid=34121 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872217.193:4811): pid=34121 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75646476667A7467776F6772696B626B666A64636C6762736175636E7072706F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872217.194:4812): pid=34121 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872217.195:4813): pid=34121 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872217.388:4814): pid=34121 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872217.388:4815): pid=34121 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872217.393:4816): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872217.393:4817): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872217.478:4818): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872217.478:4819): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872217.535:4820): pid=34139 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872217.535:4821): pid=34139 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756A6A7566736E79666D6976756668787775676269776F767468616D69696771203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872217.536:4822): pid=34139 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872217.538:4823): pid=34139 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872217.712:4824): pid=34139 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872217.712:4825): pid=34139 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872217.717:4826): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872217.717:4827): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872217.795:4828): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872217.795:4829): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872217.843:4830): pid=34157 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872217.844:4831): pid=34157 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767674666A6B786A6474716F696F6A666461786C6B736171616A7A6373676F64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872217.844:4832): pid=34157 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872217.846:4833): pid=34157 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872218.015:4834): pid=34157 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872218.015:4835): pid=34157 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872218.020:4836): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872218.020:4837): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872218.066:4838): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872218.066:4839): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872218.126:4840): pid=34174 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872218.126:4841): pid=34174 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6E6C7172677A6C66676C6C757A6C726E64766E747A77617169626872687974203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872218.126:4842): pid=34174 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872218.129:4843): pid=34174 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872218.302:4844): pid=34174 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872218.303:4845): pid=34174 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872218.306:4846): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872218.306:4847): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872218.388:4848): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872218.388:4849): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872218.447:4850): pid=34191 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872218.447:4851): pid=34191 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78736E6F6762766666617A78657A6C6667717964656B71726F6C7A6B706E6467203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872218.448:4852): pid=34191 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872218.450:4853): pid=34191 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872218.622:4854): pid=34191 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872218.623:4855): pid=34191 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872218.627:4856): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872218.627:4857): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872218.702:4858): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872218.702:4859): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872218.757:4860): pid=34208 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872218.758:4861): pid=34208 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616273746A777973766A66697479626E7A686A77706467686E7968756F747777203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872218.758:4862): pid=34208 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872218.760:4863): pid=34208 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872218.936:4864): pid=34208 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872218.937:4865): pid=34208 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872218.940:4866): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872218.940:4867): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872219.025:4868): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872219.025:4869): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872219.082:4870): pid=34225 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872219.082:4871): pid=34225 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6171636874746970767766646A7966776C7072616578756A7372797278696677203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872219.083:4872): pid=34225 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872219.085:4873): pid=34225 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872219.273:4874): pid=34225 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872219.273:4875): pid=34225 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872219.277:4876): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872219.277:4877): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872219.383:4878): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872219.383:4879): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872219.443:4880): pid=34243 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872219.443:4881): pid=34243 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6661697777657A6E62796E73667079756678736D6567637462716F726C626666203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872219.444:4882): pid=34243 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872219.447:4883): pid=34243 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765872219.732:4884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872219.753:4885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872219.774:4886): pid=34243 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872219.774:4887): pid=34243 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872219.777:4888): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872219.777:4889): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872220.201:4890): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872220.201:4891): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872220.290:4892): pid=34263 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872220.290:4893): pid=34263 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C636B6867716278676E67697161717962626D646C647565796A616C706B6F74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872220.291:4894): pid=34263 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872220.294:4895): pid=34263 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872220.464:4896): pid=34263 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872220.465:4897): pid=34263 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872220.469:4898): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872220.469:4899): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872220.532:4900): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872220.532:4901): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872220.589:4902): pid=34279 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872220.589:4903): pid=34279 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A616D6A61626E687562736A756A7361746A7463637173696663636F756C636E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872220.590:4904): pid=34279 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872220.592:4905): pid=34279 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872220.777:4906): pid=34279 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872220.777:4907): pid=34279 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872220.781:4908): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872220.782:4909): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872220.913:4910): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872220.914:4911): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872220.962:4912): pid=34295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872220.962:4913): pid=34295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616C6569686A686C6867666C687976707277616F6F66736F686E736A61656F6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872220.963:4914): pid=34295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872220.965:4915): pid=34295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872221.145:4916): pid=34295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872221.145:4917): pid=34295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872221.149:4918): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872221.149:4919): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872221.245:4920): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872221.245:4921): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872221.300:4922): pid=34311 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872221.300:4923): pid=34311 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6576796464626D7A6E63776362786666706B6168766D64736278717969716B77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872221.301:4924): pid=34311 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872221.303:4925): pid=34311 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872221.454:4926): pid=34311 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872221.454:4927): pid=34311 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872221.457:4928): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872221.457:4929): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872221.556:4930): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872221.556:4931): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872221.616:4932): pid=34327 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872221.616:4933): pid=34327 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747971756E666D6B7169636268647567787873656B6276796A76656864706E65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872221.617:4934): pid=34327 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872221.619:4935): pid=34327 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872221.784:4936): pid=34327 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872221.784:4937): pid=34327 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872221.787:4938): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872221.788:4939): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872221.849:4940): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872221.849:4941): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872221.908:4942): pid=34343 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872221.908:4943): pid=34343 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6167676C636A65656468756D68696267747675777571666573686A7261756B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872221.909:4944): pid=34343 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872221.912:4945): pid=34343 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872222.070:4946): pid=34343 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872222.070:4947): pid=34343 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872222.074:4948): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872222.074:4949): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872222.133:4950): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872222.134:4951): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872222.199:4952): pid=34359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872222.200:4953): pid=34359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657971666662617566726674677A7176746D6D6C6E6C7A796B64776877616479203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872222.200:4954): pid=34359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872222.204:4955): pid=34359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872222.389:4956): pid=34359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872222.389:4957): pid=34359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872222.393:4958): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872222.393:4959): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872222.461:4960): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872222.461:4961): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872222.521:4962): pid=34375 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872222.521:4963): pid=34375 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64786A6E686778706A7279656E617672687A706D76646B6163636961726F6D72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872222.521:4964): pid=34375 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872222.522:4965): pid=34375 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872222.679:4966): pid=34375 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872222.680:4967): pid=34375 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872222.683:4968): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872222.684:4969): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872222.754:4970): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872222.755:4971): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872222.814:4972): pid=34391 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872222.815:4973): pid=34391 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63657A64676C6668636D797070656F6D796F766B74766D647563756576787277203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872222.815:4974): pid=34391 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872222.818:4975): pid=34391 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872222.989:4976): pid=34391 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872222.989:4977): pid=34391 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872222.994:4978): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872222.994:4979): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872223.098:4980): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872223.099:4981): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872223.130:4982): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872223.130:4983): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872223.172:4984): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872223.172:4985): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872223.204:4986): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872223.204:4987): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872223.246:4988): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872223.246:4989): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872223.294:4990): pid=34439 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872223.294:4991): pid=34439 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6761626566616E727767726B7779706471756C78786B68636D6B74706D706A63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872223.295:4992): pid=34439 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872223.297:4993): pid=34439 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872223.447:4994): pid=34439 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872223.448:4995): pid=34439 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872223.452:4996): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872223.452:4997): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872223.480:4998): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872223.480:4999): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872223.513:5000): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872223.513:5001): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872223.555:5002): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872223.555:5003): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872223.580:5004): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872223.580:5005): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872223.622:5006): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872223.622:5007): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872223.671:5008): pid=34482 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872223.671:5009): pid=34482 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666373786D77626165767A65696D73667271616E696B6472666A6D7466686866203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872223.672:5010): pid=34482 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872223.674:5011): pid=34482 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872223.822:5012): pid=34482 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872223.822:5013): pid=34482 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872223.834:5014): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872223.834:5015): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872223.875:5016): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872223.875:5017): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872223.904:5018): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872223.904:5019): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872223.986:5020): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872223.986:5021): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872224.042:5022): pid=34512 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872224.042:5023): pid=34512 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F657177667072626D677473796E6561786478797A677674796F646E6F6B786F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872224.042:5024): pid=34512 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872224.045:5025): pid=34512 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872224.291:5026): pid=34512 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872224.293:5027): pid=34512 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872224.297:5028): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872224.297:5029): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872225.149:5030): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872225.149:5031): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872225.209:5032): pid=34529 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872225.210:5033): pid=34529 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7366626D6365666B61786C73696E70756A646B706E636C6A6E6E666F62636569203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872225.210:5034): pid=34529 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872225.213:5035): pid=34529 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872225.380:5036): pid=34529 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872225.380:5037): pid=34529 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872225.382:5038): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872225.383:5039): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872225.726:5040): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872225.726:5041): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872225.778:5042): pid=34545 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872225.779:5043): pid=34545 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636F736F676F7A646F686866646F747179736162677674667A6E706E696A716E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872225.779:5044): pid=34545 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872225.781:5045): pid=34545 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872225.965:5046): pid=34545 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872225.965:5047): pid=34545 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872225.968:5048): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872225.968:5049): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872226.088:5050): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872226.089:5051): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872226.143:5052): pid=34561 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872226.143:5053): pid=34561 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79696361776E766A6A676F767971747578696D657268686F7076796F6E627066203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872226.143:5054): pid=34561 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872226.146:5055): pid=34561 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872226.312:5056): pid=34561 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872226.312:5057): pid=34561 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872226.316:5058): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872226.316:5059): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872226.390:5060): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872226.390:5061): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872226.442:5062): pid=34577 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872226.442:5063): pid=34577 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7162666862726669666B6D6A766F70626F6D786C6C746F6F747272666C71796B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872226.443:5064): pid=34577 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872226.445:5065): pid=34577 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872226.623:5066): pid=34577 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872226.623:5067): pid=34577 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872226.628:5068): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872226.628:5069): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872226.694:5070): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872226.694:5071): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872226.751:5072): pid=34593 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872226.752:5073): pid=34593 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7568726B6163706E70756B74616A636264746166736663706969657965706872203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872226.752:5074): pid=34593 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872226.755:5075): pid=34593 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872226.932:5076): pid=34593 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872226.932:5077): pid=34593 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872226.936:5078): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872226.936:5079): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872227.021:5080): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872227.021:5081): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872227.081:5082): pid=34609 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872227.081:5083): pid=34609 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78666C746E6866666279626F707479756578796A63676F68616D676F6363696A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872227.081:5084): pid=34609 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872227.083:5085): pid=34609 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872227.255:5086): pid=34609 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872227.255:5087): pid=34609 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872227.260:5088): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872227.261:5089): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872227.340:5090): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872227.340:5091): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872227.395:5092): pid=34625 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872227.395:5093): pid=34625 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7176626A65626F6B656164616D6868787472766969797279757379647A787A68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872227.396:5094): pid=34625 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872227.398:5095): pid=34625 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872227.571:5096): pid=34625 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872227.572:5097): pid=34625 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872227.576:5098): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872227.576:5099): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872227.635:5100): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872227.635:5101): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872227.690:5102): pid=34641 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872227.690:5103): pid=34641 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796361637565726863706B6B616E6F7963757A77686F6C6A786164716B716B76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872227.691:5104): pid=34641 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872227.693:5105): pid=34641 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872227.848:5106): pid=34641 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872227.849:5107): pid=34641 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872227.852:5108): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872227.852:5109): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872227.922:5110): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872227.922:5111): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872227.977:5112): pid=34657 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872227.977:5113): pid=34657 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6F636269786E61766A766B787A6C756C656B6F6E65736A6D726370676B7367203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872227.978:5114): pid=34657 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872227.980:5115): pid=34657 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872228.166:5116): pid=34657 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872228.166:5117): pid=34657 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872228.170:5118): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872228.170:5119): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872228.246:5120): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872228.246:5121): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872228.333:5122): pid=34673 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872228.333:5123): pid=34673 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726A76676D7A726B666B63656E7575757478697867736B687863657570636369203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872228.334:5124): pid=34673 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872228.337:5125): pid=34673 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872228.504:5126): pid=34673 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872228.504:5127): pid=34673 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872228.509:5128): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872228.509:5129): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872228.817:5130): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872228.817:5131): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872228.878:5132): pid=34689 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872228.878:5133): pid=34689 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76676C66786A6876676F7066786C73736E756D6D6E6C686D78776F6570687262203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872228.879:5134): pid=34689 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872228.881:5135): pid=34689 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=ADD_GROUP msg=audit(1765872229.056:5136): pid=34692 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-group id=107 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="qemu"
type=GRP_MGMT msg=audit(1765872229.060:5137): pid=34692 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-shadow-group id=107 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="qemu"
type=USER_END msg=audit(1765872229.110:5138): pid=34689 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872229.111:5139): pid=34689 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872229.115:5140): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872229.115:5141): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872229.414:5142): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872229.414:5143): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872229.473:5144): pid=34711 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872229.473:5145): pid=34711 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78707864667062666C74796177706A637769716978697076646D6F657A72626C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872229.474:5146): pid=34711 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872229.476:5147): pid=34711 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=ADD_USER msg=audit(1765872229.693:5148): pid=34715 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-user acct="qemu" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_MGMT msg=audit(1765872229.741:5149): pid=34715 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=add-home-dir id=107 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin" ID="qemu"
type=USER_END msg=audit(1765872229.772:5150): pid=34711 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872229.773:5151): pid=34711 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872229.777:5152): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872229.777:5153): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872229.857:5154): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872229.857:5155): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872229.917:5156): pid=34735 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872229.917:5157): pid=34735 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7075736273616A65757261646871686F7063716E686D63796961796975766F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872229.919:5158): pid=34735 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872229.921:5159): pid=34735 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872230.099:5160): pid=34735 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872230.099:5161): pid=34735 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872230.102:5162): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872230.103:5163): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872230.170:5164): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872230.170:5165): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872230.216:5166): pid=34751 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872230.216:5167): pid=34751 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647869786D786D6D6D6A75617372716B767861657465766861796B7571786C6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872230.216:5168): pid=34751 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872230.218:5169): pid=34751 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872230.399:5170): pid=34751 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872230.399:5171): pid=34751 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872230.402:5172): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872230.403:5173): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872230.578:5174): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872230.578:5175): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872230.607:5176): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872230.607:5177): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872230.650:5178): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872230.650:5179): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872230.684:5180): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872230.684:5181): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872230.727:5182): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872230.727:5183): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872230.788:5184): pid=34800 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872230.788:5185): pid=34800 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6A6F7477756D746C6273696265626279767575646C68646F6570776F787877203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872230.789:5186): pid=34800 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872230.792:5187): pid=34800 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872230.966:5188): pid=34800 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872230.967:5189): pid=34800 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872230.971:5190): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872230.971:5191): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872231.012:5192): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872231.012:5193): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872231.047:5194): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872231.047:5195): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872231.089:5196): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872231.089:5197): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872231.119:5198): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872231.119:5199): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872231.162:5200): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872231.162:5201): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872231.220:5202): pid=34843 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872231.220:5203): pid=34843 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7868667364736D6A626C7466716E6C616B6C7865727873706361697A64646D64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872231.222:5204): pid=34843 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872231.225:5205): pid=34843 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872231.405:5206): pid=34843 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872231.406:5207): pid=34843 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872231.410:5208): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872231.410:5209): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872231.469:5210): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872231.469:5211): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872231.499:5212): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872231.499:5213): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872231.603:5214): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872231.603:5215): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872231.661:5216): pid=34873 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872231.661:5217): pid=34873 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656C6B7063636672766D70707A73756271657A7272616D6B6574737A76617672203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872231.662:5218): pid=34873 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872231.665:5219): pid=34873 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872231.979:5220): bool=os_enable_vtpm val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=SYSCALL msg=audit(1765872231.979:5220): arch=c000003e syscall=1 success=yes exit=2 a0=5 a1=7ffe78a8386e a2=2 a3=0 items=0 ppid=34873 pid=34875 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="python3" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872231.979:5220): proctitle="/usr/bin/python3"
type=USER_END msg=audit(1765872232.525:5221): pid=34873 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872232.525:5222): pid=34873 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872232.530:5223): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872232.530:5224): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872232.628:5225): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872232.628:5226): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872232.693:5227): pid=34894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872232.694:5228): pid=34894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646F69656877716A797A6568717474786174626F726573636B71797662706668203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872232.696:5229): pid=34894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872232.703:5230): pid=34894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872232.884:5231): pid=34894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872232.884:5232): pid=34894 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872232.888:5233): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872232.888:5234): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872233.072:5235): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872233.072:5236): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872233.133:5237): pid=34910 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872233.134:5238): pid=34910 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76786969627072696A716A686F676E627670646F64617775766D726266737674203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872233.135:5239): pid=34910 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872233.137:5240): pid=34910 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872233.308:5241): pid=34910 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872233.309:5242): pid=34910 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872233.312:5243): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872233.312:5244): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872233.503:5245): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872233.503:5246): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872233.559:5247): pid=34926 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872233.559:5248): pid=34926 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6D6F657A637A6871746E65646C747166766B64626B627176657075636E676D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872233.560:5249): pid=34926 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872233.562:5250): pid=34926 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_CONFIG_CHANGE msg=audit(1765872233.897:5251): bool=logrotate_read_inside_containers val=1 old_val=0 auid=1002 ses=14AUID="tripleo-admin"
type=SYSCALL msg=audit(1765872233.897:5251): arch=c000003e syscall=1 success=yes exit=2 a0=5 a1=7ffe67cf041e a2=2 a3=0 items=0 ppid=34926 pid=34928 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="python3" exe="/usr/bin/python3.9" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872233.897:5251): proctitle="/usr/bin/python3"
type=USER_END msg=audit(1765872234.482:5252): pid=34926 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872234.482:5253): pid=34926 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872234.487:5254): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872234.487:5255): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872235.197:5256): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872235.198:5257): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872235.263:5258): pid=34946 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872235.263:5259): pid=34946 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7068636F6F646C616B7A796B71777079786D6268697376726E7265757379666B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872235.264:5260): pid=34946 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872235.270:5261): pid=34946 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872238.081:5262): pid=34946 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872238.081:5263): pid=34946 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872238.085:5264): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872238.085:5265): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872238.167:5266): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872238.167:5267): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872238.228:5268): pid=34963 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872238.228:5269): pid=34963 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C736E6C7A776363786F657A68756D6C77736F6D72786B6463646B7967777970203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872238.229:5270): pid=34963 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872238.231:5271): pid=34963 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872238.732:5272): pid=34963 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872238.733:5273): pid=34963 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872238.737:5274): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872238.737:5275): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872239.019:5276): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872239.020:5277): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872239.081:5278): pid=35024 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872239.082:5279): pid=35024 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686478696272616F66637A6B796D7A72767A7A6C63636D747668786366757061203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872239.082:5280): pid=35024 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872239.083:5281): pid=35024 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872239.273:5282): pid=35024 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872239.274:5283): pid=35024 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872239.277:5284): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872239.277:5285): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872239.365:5286): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872239.365:5287): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872239.418:5288): pid=35040 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872239.418:5289): pid=35040 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A73717A796A6F637376656A72706966706F726F6C6F716E6F6374636F777A68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872239.419:5290): pid=35040 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872239.423:5291): pid=35040 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872239.661:5292): pid=35040 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872239.662:5293): pid=35040 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872239.665:5294): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872239.665:5295): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872239.757:5296): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872239.757:5297): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872239.783:5298): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872239.783:5299): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872239.825:5300): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872239.825:5301): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872239.856:5302): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872239.856:5303): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872240.016:5304): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872240.016:5305): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872240.072:5306): pid=35100 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872240.072:5307): pid=35100 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696664776C67617775786F6B666461616E6263656A6C6361796C7661637A7561203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872240.072:5308): pid=35100 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872240.074:5309): pid=35100 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872240.238:5310): pid=35100 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872240.239:5311): pid=35100 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872240.242:5312): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872240.243:5313): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872240.284:5314): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872240.284:5315): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872240.320:5316): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872240.320:5317): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872240.362:5318): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872240.362:5319): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872240.393:5320): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872240.393:5321): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872240.435:5322): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872240.435:5323): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872240.485:5324): pid=35143 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872240.485:5325): pid=35143 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746B646E62626D7879686C6979626570726E74737178736E656475756F676E77203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872240.486:5326): pid=35143 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872240.489:5327): pid=35143 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872240.669:5328): pid=35143 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872240.669:5329): pid=35143 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872240.673:5330): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872240.673:5331): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872240.714:5332): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872240.714:5333): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872240.746:5334): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872240.747:5335): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872240.849:5336): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872240.849:5337): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872240.876:5338): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872240.876:5339): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872240.918:5340): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872240.918:5341): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872240.951:5342): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872240.951:5343): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872241.082:5344): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872241.083:5345): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872241.142:5346): pid=35205 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872241.143:5347): pid=35205 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6E776C636B6E686D69657A716D776C6C736D7A6F626A6F6E62757979686C62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872241.144:5348): pid=35205 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872241.146:5349): pid=35205 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872241.331:5350): pid=35205 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872241.331:5351): pid=35205 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872241.335:5352): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872241.335:5353): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872241.377:5354): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872241.377:5355): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872241.415:5356): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872241.415:5357): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872241.456:5358): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872241.456:5359): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872241.483:5360): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872241.483:5361): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872241.526:5362): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872241.526:5363): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872241.585:5364): pid=35250 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872241.585:5365): pid=35250 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69677371676F7A6E617661646E6E677176687A6873767376677068787374627A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872241.586:5366): pid=35250 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872241.589:5367): pid=35250 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872241.761:5368): pid=35250 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872241.761:5369): pid=35250 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872241.766:5370): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872241.766:5371): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872241.807:5372): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872241.807:5373): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872241.838:5374): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872241.839:5375): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872241.966:5376): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872241.967:5377): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872242.024:5378): pid=35280 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872242.025:5379): pid=35280 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616E6A716F6B6D78626E787174667A666B75746A6A686965727A7471646E7076203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872242.025:5380): pid=35280 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872242.028:5381): pid=35280 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872242.193:5382): pid=35280 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872242.193:5383): pid=35280 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872242.197:5384): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872242.197:5385): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872242.260:5386): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872242.260:5387): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872242.311:5388): pid=35296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872242.312:5389): pid=35296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746A67697A7361797A70616668616368626673696763626F746A706B746B776C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872242.312:5390): pid=35296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872242.314:5391): pid=35296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872242.470:5392): pid=35296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872242.470:5393): pid=35296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872242.476:5394): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872242.477:5395): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872242.541:5396): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872242.541:5397): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872242.603:5398): pid=35312 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872242.603:5399): pid=35312 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6D6E626A6C7865756D686B77757A676C7979637A616A6B726C6E6B71666570203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872242.604:5400): pid=35312 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872242.607:5401): pid=35312 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872242.783:5402): pid=35312 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872242.783:5403): pid=35312 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872242.788:5404): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872242.788:5405): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872242.841:5406): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872242.842:5407): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872242.902:5408): pid=35328 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872242.902:5409): pid=35328 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7566747570646A6F63756D6A75797264756472686A736F63736867687061686D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872242.903:5410): pid=35328 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872242.905:5411): pid=35328 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872243.079:5412): pid=35328 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872243.079:5413): pid=35328 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872243.083:5414): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872243.084:5415): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872243.574:5416): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872243.574:5417): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872243.605:5418): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872243.606:5419): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872243.647:5420): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872243.647:5421): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872243.683:5422): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872243.683:5423): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872243.725:5424): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872243.725:5425): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872243.783:5426): pid=35376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872243.784:5427): pid=35376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E69737165706A686A776564686F736A78727A64726F7968727679716E767772203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872243.784:5428): pid=35376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872243.787:5429): pid=35376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872243.955:5430): pid=35376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872243.956:5431): pid=35376 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872243.959:5432): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872243.960:5433): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872244.001:5434): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872244.001:5435): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872244.038:5436): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872244.038:5437): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872244.080:5438): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872244.080:5439): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872244.111:5440): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872244.111:5441): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872244.152:5442): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872244.153:5443): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872244.208:5444): pid=35419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872244.208:5445): pid=35419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796F6B686C676C766174657364696A7477617A64626B6470617578797979706B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872244.209:5446): pid=35419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872244.211:5447): pid=35419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872244.396:5448): pid=35419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872244.396:5449): pid=35419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872244.399:5450): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872244.399:5451): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872244.429:5452): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872244.429:5453): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872244.455:5454): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872244.455:5455): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872244.596:5456): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872244.596:5457): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872244.655:5458): pid=35449 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872244.656:5459): pid=35449 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65616F77716C786E7A687078796B6F726F726C76647877716D6E647A68786B79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872244.656:5460): pid=35449 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872244.659:5461): pid=35449 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872244.843:5462): pid=35449 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872244.843:5463): pid=35449 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872244.848:5464): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872244.848:5465): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872244.962:5466): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872244.962:5467): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872245.028:5468): pid=35465 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872245.028:5469): pid=35465 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72666D72727A666B7464767378696A79676C666967736C6A697967666E6C6375203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872245.029:5470): pid=35465 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872245.031:5471): pid=35465 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872245.213:5472): pid=35465 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872245.213:5473): pid=35465 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872245.216:5474): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872245.216:5475): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872245.669:5476): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872245.669:5477): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872245.730:5478): pid=35481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872245.730:5479): pid=35481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E717173647074616F6964667573797674796B75727268616177767079636372203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872245.730:5480): pid=35481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872245.733:5481): pid=35481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872248.560:5482): pid=35481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872248.561:5483): pid=35481 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872248.564:5484): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872248.564:5485): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872249.156:5486): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872249.156:5487): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872249.186:5488): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872249.186:5489): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872249.228:5490): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872249.228:5491): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872249.259:5492): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872249.260:5493): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872249.341:5494): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872249.341:5495): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872249.401:5496): pid=35530 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872249.402:5497): pid=35530 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A62696E79646A6D696B6F616C7A6F646D6A62686972756F6D707A6C7A707374203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872249.402:5498): pid=35530 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872249.405:5499): pid=35530 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872249.594:5500): pid=35530 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872249.594:5501): pid=35530 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872249.598:5502): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872249.598:5503): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872249.640:5504): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872249.640:5505): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872249.676:5506): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872249.677:5507): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872249.718:5508): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872249.718:5509): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872249.748:5510): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872249.748:5511): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872249.790:5512): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872249.790:5513): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872249.849:5514): pid=35575 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872249.849:5515): pid=35575 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B786E6C70726F77767A686C6C656562626776796E62706E726E7A76636A6B67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872249.850:5516): pid=35575 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872249.852:5517): pid=35575 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872250.055:5518): pid=35575 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872250.055:5519): pid=35575 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872250.059:5520): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872250.059:5521): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872250.101:5522): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872250.101:5523): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872250.129:5524): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872250.129:5525): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872250.226:5526): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872250.226:5527): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872250.292:5528): pid=35606 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872250.292:5529): pid=35606 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7265636D617763796C75646C697A6C6D7878626177786B7366706A6C6E6C7A61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872250.293:5530): pid=35606 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872250.295:5531): pid=35606 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765872250.658:5532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872250.683:5533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872250.699:5534): pid=35606 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872250.700:5535): pid=35606 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872250.703:5536): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872250.703:5537): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872250.818:5538): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872250.818:5539): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872250.884:5540): pid=35626 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872250.884:5541): pid=35626 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7165757178776F6F6D72767064786B616A786E766C64726273647474747478203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872250.885:5542): pid=35626 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872250.887:5543): pid=35626 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872251.073:5544): pid=35626 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872251.073:5545): pid=35626 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872251.075:5546): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872251.075:5547): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872251.859:5548): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872251.860:5549): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872251.920:5550): pid=35644 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872251.921:5551): pid=35644 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6776626D6E6E6162696361686F756E6277796370666D7062617A68646C616E67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872251.921:5552): pid=35644 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872251.924:5553): pid=35644 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872252.121:5554): pid=35644 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872252.121:5555): pid=35644 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872252.124:5556): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872252.124:5557): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872252.322:5558): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872252.323:5559): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872252.374:5560): pid=35662 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872252.375:5561): pid=35662 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B766E726C796C687273747062736564717775786B6C7766656B71717367706E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872252.375:5562): pid=35662 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872252.376:5563): pid=35662 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872255.200:5564): pid=35662 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872255.200:5565): pid=35662 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872255.203:5566): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872255.203:5567): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872255.587:5568): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872255.587:5569): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872255.613:5570): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872255.613:5571): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872255.655:5572): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872255.655:5573): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872255.688:5574): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872255.688:5575): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872255.843:5576): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872255.843:5577): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872255.902:5578): pid=35711 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872255.902:5579): pid=35711 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657671726F6E7A776F79737A63676D63777964616C706E746A7268776D6F6975203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872255.902:5580): pid=35711 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872255.905:5581): pid=35711 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872256.086:5582): pid=35711 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872256.086:5583): pid=35711 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872256.090:5584): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872256.090:5585): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872256.132:5586): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872256.132:5587): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872256.169:5588): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872256.169:5589): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872256.211:5590): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872256.211:5591): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872256.241:5592): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872256.241:5593): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872256.283:5594): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872256.283:5595): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872256.342:5596): pid=35756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872256.343:5597): pid=35756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7962647A756E6F736B75676C6A747A6864716B776E637A636361677175747061203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872256.343:5598): pid=35756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872256.346:5599): pid=35756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872256.522:5600): pid=35756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872256.523:5601): pid=35756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872256.526:5602): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872256.526:5603): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872256.568:5604): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872256.568:5605): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872256.598:5606): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872256.598:5607): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872256.977:5608): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872256.978:5609): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872257.031:5610): pid=35786 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872257.032:5611): pid=35786 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A756D6A7274646D6C636D75787A756577626D7762687279776F7168656A6C71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872257.032:5612): pid=35786 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872257.034:5613): pid=35786 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872257.335:5614): pid=35786 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872257.336:5615): pid=35786 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872257.339:5616): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872257.339:5617): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872257.476:5618): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872257.476:5619): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872257.526:5620): pid=35804 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872257.526:5621): pid=35804 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D787862687164716477686C6B7179647162616C776A7A6365637563637067666F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872257.527:5622): pid=35804 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872257.529:5623): pid=35804 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765872257.806:5624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765872257.808:5625): prog-id=155 op=LOAD
type=BPF msg=audit(1765872257.825:5626): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765872257.838:5627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872257.855:5628): pid=35804 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872257.856:5629): pid=35804 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872257.859:5630): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872257.860:5631): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872258.117:5632): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872258.117:5633): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872258.150:5634): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872258.150:5635): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872258.192:5636): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872258.192:5637): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872258.225:5638): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872258.225:5639): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872258.267:5640): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872258.267:5641): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872258.317:5642): pid=35860 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872258.317:5643): pid=35860 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776B6C78767068756868686E6B70796D62616F66747A6B68616B62757063796C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872258.318:5644): pid=35860 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872258.323:5645): pid=35860 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872258.497:5646): pid=35860 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872258.498:5647): pid=35860 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872258.501:5648): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872258.501:5649): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872258.543:5650): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872258.543:5651): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872258.579:5652): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872258.579:5653): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872258.621:5654): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872258.621:5655): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872258.652:5656): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872258.652:5657): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872258.694:5658): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872258.694:5659): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872258.755:5660): pid=35904 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872258.755:5661): pid=35904 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D63696861676E6D677976667272716D6367626E716C61726173636C696F7371203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872258.756:5662): pid=35904 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872258.759:5663): pid=35904 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872258.954:5664): pid=35904 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872258.954:5665): pid=35904 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872258.958:5666): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872258.958:5667): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872259.000:5668): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872259.000:5669): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872259.031:5670): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872259.032:5671): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872259.158:5672): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872259.158:5673): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872259.218:5674): pid=35934 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872259.219:5675): pid=35934 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D667963776A6B7778797673717375797077686A656D706373656E77766964726B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872259.219:5676): pid=35934 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872259.222:5677): pid=35934 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872259.698:5678): prog-id=156 op=LOAD
type=BPF msg=audit(1765872259.699:5679): prog-id=157 op=LOAD
type=BPF msg=audit(1765872259.699:5680): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872259.699:5681): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872259.699:5682): prog-id=158 op=LOAD
type=BPF msg=audit(1765872259.699:5683): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872259.702:5684): prog-id=159 op=LOAD
type=BPF msg=audit(1765872259.702:5685): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872259.703:5686): prog-id=160 op=LOAD
type=BPF msg=audit(1765872259.703:5687): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872259.703:5688): prog-id=161 op=LOAD
type=BPF msg=audit(1765872259.703:5689): prog-id=162 op=LOAD
type=BPF msg=audit(1765872259.703:5690): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872259.703:5691): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872259.704:5692): prog-id=163 op=LOAD
type=BPF msg=audit(1765872259.704:5693): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872259.704:5694): prog-id=164 op=LOAD
type=BPF msg=audit(1765872259.705:5695): prog-id=165 op=LOAD
type=BPF msg=audit(1765872259.705:5696): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872259.705:5697): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872259.923:5698): prog-id=166 op=LOAD
type=BPF msg=audit(1765872259.923:5699): prog-id=167 op=LOAD
type=BPF msg=audit(1765872259.923:5700): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872259.923:5701): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872259.924:5702): prog-id=168 op=LOAD
type=BPF msg=audit(1765872259.924:5703): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872259.926:5704): prog-id=169 op=LOAD
type=BPF msg=audit(1765872259.926:5705): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872259.927:5706): prog-id=170 op=LOAD
type=BPF msg=audit(1765872259.927:5707): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872259.927:5708): prog-id=171 op=LOAD
type=BPF msg=audit(1765872259.927:5709): prog-id=172 op=LOAD
type=BPF msg=audit(1765872259.927:5710): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872259.928:5711): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872259.929:5712): prog-id=173 op=LOAD
type=BPF msg=audit(1765872259.929:5713): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872259.929:5714): prog-id=174 op=LOAD
type=BPF msg=audit(1765872259.929:5715): prog-id=175 op=LOAD
type=BPF msg=audit(1765872259.929:5716): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872259.929:5717): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765872259.954:5718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chrony-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872259.954:5719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chrony-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872259.991:5720): pid=35934 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872259.992:5721): pid=35934 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872259.997:5722): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872259.997:5723): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872260.184:5724): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872260.184:5725): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872260.245:5726): pid=36027 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872260.245:5727): pid=36027 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767875667A69737068776C6D77756E697274666E7A6B736563786E797A776A62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872260.247:5728): pid=36027 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872260.252:5729): pid=36027 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872260.427:5730): pid=36027 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872260.427:5731): pid=36027 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872260.431:5732): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872260.431:5733): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872260.526:5734): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872260.526:5735): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872260.590:5736): pid=36044 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872260.590:5737): pid=36044 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72796A766E74736F706978676F7A7379786A796E6A6868697362727762656273203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872260.591:5738): pid=36044 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872260.594:5739): pid=36044 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765872263.712:5740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872263.712:5741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dnf-makecache comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872270.791:5742): pid=36044 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872270.791:5743): pid=36044 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872270.795:5744): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872270.795:5745): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872270.913:5746): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872270.913:5747): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872270.970:5748): pid=36068 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872270.971:5749): pid=36068 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74666D73736B726D6E706A72686A6871736575646866766E7078726A70676F72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872270.971:5750): pid=36068 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872270.974:5751): pid=36068 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872271.161:5752): pid=36068 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872271.162:5753): pid=36068 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872271.166:5754): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872271.166:5755): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872271.247:5756): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872271.248:5757): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872271.313:5758): pid=36085 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872271.313:5759): pid=36085 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67646E686777617863716A7663746178706779706963716C63736D706A626577203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872271.314:5760): pid=36085 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872271.316:5761): pid=36085 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872271.497:5762): pid=36085 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872271.497:5763): pid=36085 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872271.500:5764): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872271.501:5765): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872271.939:5766): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872271.939:5767): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872271.998:5768): pid=36102 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872271.998:5769): pid=36102 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A74756A6C686C74727A6B637869696A79766769636D687963756E62786B666F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872271.999:5770): pid=36102 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872272.002:5771): pid=36102 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872272.181:5772): prog-id=176 op=LOAD
type=BPF msg=audit(1765872272.182:5773): prog-id=177 op=LOAD
type=BPF msg=audit(1765872272.182:5774): prog-id=178 op=LOAD
type=SERVICE_START msg=audit(1765872272.227:5775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872273.274:5776): pid=36102 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872273.274:5777): pid=36102 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872273.278:5778): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872273.278:5779): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872274.280:5780): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872274.280:5781): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872274.340:5782): pid=36122 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872274.340:5783): pid=36122 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677A776363796C66736271727561796F697063667A7463726974636862737670203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872274.341:5784): pid=36122 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872274.344:5785): pid=36122 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872274.536:5786): pid=36122 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872274.536:5787): pid=36122 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872274.540:5788): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872274.540:5789): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872274.843:5790): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872274.843:5791): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872274.902:5792): pid=36139 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872274.903:5793): pid=36139 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76636C746468707973796662696565716B627A77766163626E66767679766E6A203B20504154483D2F62696E3A2F7573722F62696E3A2F7362696E3A2F7573722F7362696E202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872274.903:5794): pid=36139 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872274.906:5795): pid=36139 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872275.076:5796): pid=36139 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872275.077:5797): pid=36139 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872275.080:5798): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872275.080:5799): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872275.457:5800): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872275.457:5801): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872275.518:5802): pid=36156 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872275.518:5803): pid=36156 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65666274716B6F6D6F6265776C636F777462696D71617376777A6B7A6D646672203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872275.519:5804): pid=36156 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872275.521:5805): pid=36156 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872275.685:5806): pid=36156 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872275.685:5807): pid=36156 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872275.689:5808): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872275.689:5809): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872275.815:5810): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872275.815:5811): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872275.877:5812): pid=36172 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872275.877:5813): pid=36172 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66676C6661686F6C65667174636D68667A6F746D66736E6A797670626973706E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872275.878:5814): pid=36172 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872275.881:5815): pid=36172 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872276.046:5816): pid=36172 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872276.046:5817): pid=36172 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872276.051:5818): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872276.051:5819): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872276.346:5820): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872276.346:5821): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872276.398:5822): pid=36188 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872276.398:5823): pid=36188 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66616269667A776D716879666E756E767A6E79726770636B6F71696F79666966203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872276.399:5824): pid=36188 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872276.401:5825): pid=36188 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872276.539:5826): pid=36188 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872276.540:5827): pid=36188 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872276.544:5828): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872276.544:5829): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872276.599:5830): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872276.599:5831): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872276.659:5832): pid=36204 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872276.659:5833): pid=36204 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A72746C716166706C7865726973646E6C706B7A7672776A6D65777369647072203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872276.660:5834): pid=36204 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872276.663:5835): pid=36204 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872276.839:5836): pid=36204 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872276.840:5837): pid=36204 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872276.844:5838): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872276.844:5839): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872276.930:5840): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872276.930:5841): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872276.962:5842): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872276.962:5843): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872277.010:5844): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872277.010:5845): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872277.052:5846): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872277.053:5847): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872277.094:5848): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872277.094:5849): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872277.154:5850): pid=36252 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872277.155:5851): pid=36252 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7171746A6277667A66656F7472706570626A72686175646C6D7569787463736F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872277.156:5852): pid=36252 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872277.157:5853): pid=36252 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872277.315:5854): pid=36252 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872277.315:5855): pid=36252 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872277.319:5856): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872277.319:5857): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872277.360:5858): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872277.360:5859): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872277.396:5860): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872277.396:5861): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872277.438:5862): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872277.438:5863): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872277.469:5864): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872277.469:5865): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872277.511:5866): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872277.511:5867): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872277.570:5868): pid=36295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872277.570:5869): pid=36295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D6C7763717170626661616162747067776A6878627169776373746D6A73636F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872277.571:5870): pid=36295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872277.573:5871): pid=36295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872277.750:5872): pid=36295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872277.751:5873): pid=36295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872277.754:5874): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872277.755:5875): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872277.796:5876): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872277.796:5877): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872277.826:5878): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872277.826:5879): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872277.898:5880): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872277.899:5881): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872277.930:5882): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872277.931:5883): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872277.972:5884): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872277.972:5885): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872278.007:5886): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872278.007:5887): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872278.048:5888): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872278.048:5889): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872278.099:5890): pid=36357 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872278.099:5891): pid=36357 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75626973776C6961696B657176696577666D74777665716C79727A6868646B72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872278.100:5892): pid=36357 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872278.103:5893): pid=36357 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872278.260:5894): pid=36357 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872278.260:5895): pid=36357 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872278.264:5896): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872278.264:5897): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872278.306:5898): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872278.306:5899): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872278.341:5900): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872278.342:5901): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872278.383:5902): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872278.383:5903): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872278.416:5904): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872278.416:5905): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872278.459:5906): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872278.459:5907): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872278.511:5908): pid=36400 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872278.512:5909): pid=36400 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776F6F697968657564786F7765656F6E736961796C7074637978757074767477203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872278.512:5910): pid=36400 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872278.515:5911): pid=36400 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872278.694:5912): pid=36400 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872278.694:5913): pid=36400 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872278.697:5914): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872278.697:5915): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872278.739:5916): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872278.739:5917): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872278.767:5918): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872278.767:5919): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872278.852:5920): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872278.852:5921): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872278.912:5922): pid=36430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872278.912:5923): pid=36430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77756C6A6C716D6C706478746664776E736F7A7675756C7861706F657276616A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872278.913:5924): pid=36430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872278.916:5925): pid=36430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872279.460:5926): prog-id=179 op=LOAD
type=BPF msg=audit(1765872279.460:5927): prog-id=180 op=LOAD
type=BPF msg=audit(1765872279.460:5928): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872279.460:5929): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872279.460:5930): prog-id=181 op=LOAD
type=BPF msg=audit(1765872279.460:5931): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872279.462:5932): prog-id=182 op=LOAD
type=BPF msg=audit(1765872279.462:5933): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872279.462:5934): prog-id=183 op=LOAD
type=BPF msg=audit(1765872279.462:5935): prog-id=184 op=LOAD
type=BPF msg=audit(1765872279.462:5936): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872279.462:5937): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872279.463:5938): prog-id=185 op=LOAD
type=BPF msg=audit(1765872279.463:5939): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872279.465:5940): prog-id=186 op=LOAD
type=BPF msg=audit(1765872279.465:5941): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872279.465:5942): prog-id=187 op=LOAD
type=BPF msg=audit(1765872279.465:5943): prog-id=188 op=LOAD
type=BPF msg=audit(1765872279.465:5944): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872279.465:5945): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872279.466:5946): prog-id=189 op=LOAD
type=BPF msg=audit(1765872279.466:5947): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872279.466:5948): prog-id=190 op=LOAD
type=BPF msg=audit(1765872279.466:5949): prog-id=191 op=LOAD
type=BPF msg=audit(1765872279.466:5950): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872279.466:5951): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765872279.503:5952): pid=36430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872279.503:5953): pid=36430 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872279.508:5954): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872279.508:5955): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872279.615:5956): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872279.615:5957): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872279.683:5958): pid=36483 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872279.683:5959): pid=36483 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6B796A676D7666647874657762757579736F746B756B697377626F746D6277203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872279.685:5960): pid=36483 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872279.689:5961): pid=36483 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872279.937:5962): pid=36483 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872279.937:5963): pid=36483 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872279.941:5964): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872279.941:5965): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872280.053:5966): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872280.053:5967): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872280.114:5968): pid=36499 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872280.114:5969): pid=36499 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6574756E6C77706E6E6E7073696176707A766F78637169657A7A6F706B696471203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872280.115:5970): pid=36499 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872280.117:5971): pid=36499 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872280.297:5972): pid=36499 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872280.297:5973): pid=36499 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872280.301:5974): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872280.301:5975): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872280.394:5976): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872280.395:5977): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872280.453:5978): pid=36516 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872280.454:5979): pid=36516 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7765667062757463647974706770706B7379706466656A766F62626C7167766A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872280.455:5980): pid=36516 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872280.458:5981): pid=36516 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872280.592:5982): pid=36516 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872280.593:5983): pid=36516 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872280.596:5984): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872280.597:5985): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872280.673:5986): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872280.673:5987): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872280.733:5988): pid=36533 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872280.733:5989): pid=36533 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786F676579696F6B686D79716A6863697770666763637A6E62767A797264786F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872280.734:5990): pid=36533 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872280.737:5991): pid=36533 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872280.927:5992): pid=36533 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872280.928:5993): pid=36533 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872280.931:5994): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872280.931:5995): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872281.100:5996): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872281.101:5997): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872281.159:5998): pid=36549 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872281.159:5999): pid=36549 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7861716C7778756C7273726778757863786A6461766961757262756473796E62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872281.159:6000): pid=36549 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872281.162:6001): pid=36549 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872281.345:6002): pid=36549 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872281.345:6003): pid=36549 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872281.350:6004): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872281.350:6005): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872281.454:6006): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872281.454:6007): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872281.485:6008): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872281.485:6009): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872281.527:6010): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872281.527:6011): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872281.563:6012): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872281.563:6013): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872281.604:6014): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872281.604:6015): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872281.662:6016): pid=36597 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872281.662:6017): pid=36597 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71696A696F7A686A736673696974747672656D6669707678706D686F66757162203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872281.662:6018): pid=36597 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872281.664:6019): pid=36597 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872281.818:6020): pid=36597 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872281.819:6021): pid=36597 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872281.823:6022): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872281.823:6023): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872281.866:6024): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872281.867:6025): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872281.898:6026): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872281.898:6027): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872281.940:6028): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872281.940:6029): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872281.973:6030): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872281.973:6031): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872282.015:6032): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872282.015:6033): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872282.070:6034): pid=36640 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872282.070:6035): pid=36640 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7A686578696B6C6C70676D62796D6B6774676F6A787363776D77627A6A7673203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872282.071:6036): pid=36640 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872282.074:6037): pid=36640 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872282.253:6038): pid=36640 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872282.254:6039): pid=36640 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872282.257:6040): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872282.258:6041): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872282.299:6042): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872282.299:6043): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872282.325:6044): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872282.325:6045): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765872303.286:6046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-timedated comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765872303.297:6047): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872303.297:6048): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872303.297:6049): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1765872308.896:6050): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872308.897:6051): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872308.955:6052): pid=36673 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872308.956:6053): pid=36673 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7179656568746864747178766F6F647573706279646163727A6F76666D736D71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872308.957:6054): pid=36673 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872308.959:6055): pid=36673 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872309.139:6056): pid=36673 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872309.139:6057): pid=36673 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872309.144:6058): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872309.144:6059): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872309.215:6060): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872309.216:6061): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872309.277:6062): pid=36689 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872309.277:6063): pid=36689 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627275726B6677686C79676961797A636B786D656A666D61666B6D6A6772616D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872309.278:6064): pid=36689 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872309.280:6065): pid=36689 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872309.459:6066): pid=36689 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872309.460:6067): pid=36689 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872309.463:6068): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872309.463:6069): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872309.551:6070): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872309.551:6071): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872309.598:6072): pid=36705 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872309.598:6073): pid=36705 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686D656375717779696762676D646C636377697371696E72796D736A6F747166203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872309.599:6074): pid=36705 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872309.601:6075): pid=36705 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872309.731:6076): pid=36705 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872309.732:6077): pid=36705 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872309.735:6078): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872309.736:6079): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872309.825:6080): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872309.825:6081): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872309.874:6082): pid=36721 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872309.874:6083): pid=36721 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796A736E64696775657162656D776D6471616E6F6D6F61716D796176616D737A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872309.874:6084): pid=36721 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872309.877:6085): pid=36721 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872310.036:6086): pid=36721 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872310.037:6087): pid=36721 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872310.040:6088): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872310.040:6089): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872310.121:6090): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872310.122:6091): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872310.173:6092): pid=36737 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872310.174:6093): pid=36737 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6871696F666E7A636D7367626D78787A75686C737072646B70746579756764203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872310.174:6094): pid=36737 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872310.176:6095): pid=36737 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872310.350:6096): pid=36737 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872310.350:6097): pid=36737 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872310.354:6098): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872310.354:6099): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872310.477:6100): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872310.478:6101): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872310.531:6102): pid=36753 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872310.531:6103): pid=36753 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6163776C6B6B657263667070777365797570687074747A706D64616B676B6763203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872310.532:6104): pid=36753 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872310.534:6105): pid=36753 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=MAC_POLICY_LOAD msg=audit(1765872311.497:6106): auid=1002 ses=14 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1765872311.497:6106): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7f6f72c00000 a2=36aa51 a3=0 items=0 ppid=36755 pid=36764 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872311.497:6106): proctitle="/sbin/load_policy"
type=USER_MAC_CONFIG_CHANGE msg=audit(1765872311.656:6107): pid=36755 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='resrc=fcontext op=add tglob="/var/lib/container-config-scripts(/.*)?" ftype=any tcontext=system_u:object_r:container_file_t:s0 comm="semanage" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1765872311.688:6108): pid=36753 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872311.688:6109): pid=36753 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872311.693:6110): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872311.694:6111): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872311.795:6112): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872311.795:6113): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872311.853:6114): pid=36778 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872311.853:6115): pid=36778 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786E796B626378666E727873656A646B667261737575636C66616D6F77786E78203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872311.854:6116): pid=36778 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872311.858:6117): pid=36778 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872312.032:6118): pid=36778 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872312.032:6119): pid=36778 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872312.036:6120): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872312.036:6121): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872312.306:6122): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872312.306:6123): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872312.365:6124): pid=36794 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872312.365:6125): pid=36794 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6F736566747A67697176697966746972776671776E7A64686C646E6C617368203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872312.366:6126): pid=36794 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872312.368:6127): pid=36794 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872312.552:6128): pid=36794 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872312.552:6129): pid=36794 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872312.556:6130): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872312.556:6131): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872312.688:6132): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872312.688:6133): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872312.719:6134): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872312.719:6135): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872312.761:6136): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872312.761:6137): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872312.799:6138): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872312.799:6139): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872312.840:6140): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872312.840:6141): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872312.905:6142): pid=36842 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872312.905:6143): pid=36842 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666F72667970746364646773637068746876767962646F68736A636268686564203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872312.906:6144): pid=36842 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872312.909:6145): pid=36842 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872313.074:6146): pid=36842 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872313.074:6147): pid=36842 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872313.078:6148): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872313.078:6149): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872313.120:6150): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872313.120:6151): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872313.158:6152): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872313.159:6153): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872313.200:6154): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872313.200:6155): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872313.230:6156): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872313.230:6157): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872313.271:6158): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872313.271:6159): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872313.321:6160): pid=36885 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872313.321:6161): pid=36885 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7875697A6963747770666470647A6D77736D7163717169756C627265616E62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872313.322:6162): pid=36885 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872313.325:6163): pid=36885 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872313.478:6164): pid=36885 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872313.478:6165): pid=36885 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872313.481:6166): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872313.482:6167): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872313.523:6168): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872313.523:6169): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872313.553:6170): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872313.553:6171): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872313.828:6172): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872313.828:6173): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872313.874:6174): pid=36915 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872313.874:6175): pid=36915 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6869656371747A6E627667646878707070646D7270686C6C7169706878726670203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872313.875:6176): pid=36915 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872313.878:6177): pid=36915 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872314.052:6178): pid=36915 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872314.053:6179): pid=36915 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872314.057:6180): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872314.057:6181): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872314.147:6182): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872314.147:6183): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872314.205:6184): pid=36931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872314.205:6185): pid=36931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75726D6E6E6A7774657079646972617573686276686766626B756D617077707A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872314.206:6186): pid=36931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872314.209:6187): pid=36931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872314.362:6188): pid=36931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872314.362:6189): pid=36931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872314.366:6190): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872314.366:6191): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872314.505:6192): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872314.505:6193): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872314.558:6194): pid=36947 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872314.558:6195): pid=36947 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6175657771716679756C79687A637066647871746E6E707A6E79787A6C747974203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872314.559:6196): pid=36947 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872314.561:6197): pid=36947 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872314.735:6198): pid=36947 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872314.735:6199): pid=36947 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872314.739:6200): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872314.739:6201): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872314.951:6202): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872314.951:6203): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872315.010:6204): pid=36963 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872315.010:6205): pid=36963 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76687A6E6F626972686B68646A6D737465676E737776697A746B6F6C64646C6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872315.010:6206): pid=36963 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872315.013:6207): pid=36963 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872315.190:6208): pid=36963 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872315.190:6209): pid=36963 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872315.194:6210): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872315.194:6211): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872322.336:6212): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872322.336:6213): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872322.397:6214): pid=36979 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872322.397:6215): pid=36979 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D656678717676726F686E776D77617775716A756C7779656C6F676A71676563203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872322.398:6216): pid=36979 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872322.400:6217): pid=36979 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872322.563:6218): pid=36979 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872322.564:6219): pid=36979 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872322.567:6220): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872322.567:6221): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872323.464:6222): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872323.464:6223): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872323.519:6224): pid=36995 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872323.519:6225): pid=36995 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66766D696D68766E73716176787876616179617277796A777570677378797466203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872323.520:6226): pid=36995 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872323.522:6227): pid=36995 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872324.150:6228): pid=36995 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872324.150:6229): pid=36995 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872324.154:6230): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872324.154:6231): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872324.258:6232): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872324.258:6233): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872324.316:6234): pid=37017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872324.316:6235): pid=37017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626F74746F6574757663776669706C6970796761626E6A64787672756C766A62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872324.317:6236): pid=37017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872324.319:6237): pid=37017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872324.492:6238): pid=37017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872324.493:6239): pid=37017 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872324.496:6240): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872324.497:6241): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872324.590:6242): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872324.590:6243): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872324.645:6244): pid=37033 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872324.645:6245): pid=37033 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727A61757864696979756D66667A6566796E79797A6F63717864747273766761203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872324.646:6246): pid=37033 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872324.649:6247): pid=37033 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872325.452:6248): prog-id=192 op=LOAD
type=BPF msg=audit(1765872325.452:6249): prog-id=193 op=LOAD
type=BPF msg=audit(1765872325.452:6250): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872325.452:6251): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872325.453:6252): prog-id=194 op=LOAD
type=BPF msg=audit(1765872325.453:6253): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872325.455:6254): prog-id=195 op=LOAD
type=BPF msg=audit(1765872325.455:6255): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872325.456:6256): prog-id=196 op=LOAD
type=BPF msg=audit(1765872325.456:6257): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872325.457:6258): prog-id=197 op=LOAD
type=BPF msg=audit(1765872325.457:6259): prog-id=198 op=LOAD
type=BPF msg=audit(1765872325.457:6260): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872325.457:6261): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872325.458:6262): prog-id=199 op=LOAD
type=BPF msg=audit(1765872325.458:6263): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872325.458:6264): prog-id=200 op=LOAD
type=BPF msg=audit(1765872325.458:6265): prog-id=201 op=LOAD
type=BPF msg=audit(1765872325.458:6266): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872325.458:6267): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765872325.479:6268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765872325.480:6269): prog-id=202 op=LOAD
type=BPF msg=audit(1765872325.488:6270): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765872325.539:6271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=chronyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872334.659:6272): pid=37033 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872334.659:6273): pid=37033 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872334.664:6274): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872334.664:6275): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872334.953:6276): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872334.953:6277): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872335.013:6278): pid=37102 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872335.013:6279): pid=37102 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C64646C796E7A70706F706B776F796C7766656B766167656E74677476647970203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872335.014:6280): pid=37102 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872335.018:6281): pid=37102 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872335.588:6282): pid=37102 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872335.588:6283): pid=37102 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872335.592:6284): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872335.592:6285): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872336.611:6286): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872336.611:6287): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872336.664:6288): pid=37123 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872336.664:6289): pid=37123 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6A716862776F73656D6C626E6B6D6B7366647975737A72737264786B777264203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872336.665:6290): pid=37123 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872336.668:6291): pid=37123 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872336.822:6292): pid=37123 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872336.823:6293): pid=37123 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872336.825:6294): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872336.825:6295): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872336.929:6296): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872336.929:6297): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872336.967:6298): pid=37140 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872336.967:6299): pid=37140 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7462727A6D627875676566757A6E6D737679696B766566727374656E666476203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872336.967:6300): pid=37140 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872336.969:6301): pid=37140 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872337.449:6302): prog-id=203 op=LOAD
type=BPF msg=audit(1765872337.449:6303): prog-id=204 op=LOAD
type=SERVICE_START msg=audit(1765872337.528:6304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872337.596:6305): pid=37140 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872337.597:6306): pid=37140 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872337.600:6307): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872337.600:6308): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872337.697:6309): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872337.697:6310): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872337.737:6311): pid=37159 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872337.738:6312): pid=37159 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70767273796678646176687A71786D686A77656669676B6364787861646F6B6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872337.738:6313): pid=37159 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872337.742:6314): pid=37159 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872338.246:6315): pid=37159 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872338.247:6316): pid=37159 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872338.249:6317): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872338.249:6318): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872338.451:6319): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872338.451:6320): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872338.498:6321): pid=37180 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872338.498:6322): pid=37180 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7574666C776E6862746766796E78657670766877776A6D73766C736D7A617A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872338.499:6323): pid=37180 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872338.500:6324): pid=37180 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872340.235:6325): pid=37180 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872340.236:6326): pid=37180 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872340.241:6327): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872340.241:6328): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872340.602:6329): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872340.602:6330): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872340.653:6331): pid=37201 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872340.653:6332): pid=37201 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7570747475717669716D776662786271786870636579777164666C6978786672203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872340.654:6333): pid=37201 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872340.656:6334): pid=37201 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872341.151:6335): pid=37201 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872341.152:6336): pid=37201 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872341.155:6337): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872341.155:6338): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872341.320:6339): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872341.320:6340): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872341.381:6341): pid=37218 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872341.381:6342): pid=37218 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786C616A6B61716561736474677A63766C656E796B7870766C73676774647371203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872341.382:6343): pid=37218 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872341.385:6344): pid=37218 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872341.908:6345): pid=37218 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872341.909:6346): pid=37218 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872341.913:6347): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872341.913:6348): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872342.054:6349): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872342.054:6350): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872342.112:6351): pid=37235 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872342.113:6352): pid=37235 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F73626775716A6874766B68627474716E6D69777562676367617576756E6479203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872342.113:6353): pid=37235 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872342.117:6354): pid=37235 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872344.285:6355): pid=37235 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872344.286:6356): pid=37235 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872344.289:6357): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872344.290:6358): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872344.628:6359): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872344.628:6360): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872344.684:6361): pid=37264 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872344.684:6362): pid=37264 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7264686C767577756E666E696766756E6F6168646677636777727A61626E646F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872344.685:6363): pid=37264 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872344.687:6364): pid=37264 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765872348.752:6365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sssd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765872348.994:6366): prog-id=205 op=LOAD
type=BPF msg=audit(1765872348.994:6367): prog-id=206 op=LOAD
type=BPF msg=audit(1765872348.994:6368): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872348.994:6369): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872348.995:6370): prog-id=207 op=LOAD
type=BPF msg=audit(1765872348.995:6371): prog-id=208 op=LOAD
type=BPF msg=audit(1765872348.995:6372): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872348.995:6373): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872348.996:6374): prog-id=209 op=LOAD
type=BPF msg=audit(1765872348.996:6375): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872348.998:6376): prog-id=210 op=LOAD
type=BPF msg=audit(1765872348.998:6377): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872348.999:6378): prog-id=211 op=LOAD
type=BPF msg=audit(1765872348.999:6379): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872348.999:6380): prog-id=212 op=LOAD
type=BPF msg=audit(1765872348.999:6381): prog-id=213 op=LOAD
type=BPF msg=audit(1765872348.999:6382): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872348.999:6383): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872349.001:6384): prog-id=214 op=LOAD
type=BPF msg=audit(1765872349.001:6385): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872349.001:6386): prog-id=215 op=LOAD
type=BPF msg=audit(1765872349.001:6387): prog-id=216 op=LOAD
type=BPF msg=audit(1765872349.001:6388): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872349.001:6389): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765872349.255:6390): pid=37264 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872349.255:6391): pid=37264 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872349.260:6392): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872349.260:6393): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872349.399:6394): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872349.399:6395): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872349.467:6396): pid=37361 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872349.467:6397): pid=37361 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636F617479796D6971706E706A716D7A786164786C65696F68616E6F7771657A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872349.469:6398): pid=37361 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872349.474:6399): pid=37361 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRYPTO_KEY_USER msg=audit(1765872349.987:6400): pid=35612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=35612 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1765872349.989:6401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872350.012:6402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=sshd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872350.103:6403): pid=37361 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872350.103:6404): pid=37361 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872350.107:6405): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872350.107:6406): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872350.281:6407): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872350.281:6408): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872350.342:6409): pid=37383 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872350.342:6410): pid=37383 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F677A6477777977706B696D7863706E647669666E6869667A76737071776979203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872350.344:6411): pid=37383 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872350.346:6412): pid=37383 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872350.844:6413): pid=37383 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872350.844:6414): pid=37383 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872350.848:6415): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872350.848:6416): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872351.047:6417): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872351.047:6418): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872351.093:6419): pid=37400 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872351.093:6420): pid=37400 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6471657A726368726D6F796D686D726E796C736C75706A787A74616B62706E69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872351.094:6421): pid=37400 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872351.096:6422): pid=37400 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872351.814:6423): prog-id=217 op=LOAD
type=BPF msg=audit(1765872351.815:6424): prog-id=218 op=LOAD
type=BPF msg=audit(1765872351.815:6425): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872351.815:6426): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872351.816:6427): prog-id=219 op=LOAD
type=BPF msg=audit(1765872351.816:6428): prog-id=220 op=LOAD
type=BPF msg=audit(1765872351.816:6429): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872351.816:6430): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872351.816:6431): prog-id=221 op=LOAD
type=BPF msg=audit(1765872351.816:6432): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872351.819:6433): prog-id=222 op=LOAD
type=BPF msg=audit(1765872351.819:6434): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872351.820:6435): prog-id=223 op=LOAD
type=BPF msg=audit(1765872351.820:6436): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872351.820:6437): prog-id=224 op=LOAD
type=BPF msg=audit(1765872351.820:6438): prog-id=225 op=LOAD
type=BPF msg=audit(1765872351.820:6439): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872351.820:6440): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872351.821:6441): prog-id=226 op=LOAD
type=BPF msg=audit(1765872351.821:6442): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872351.821:6443): prog-id=227 op=LOAD
type=BPF msg=audit(1765872351.821:6444): prog-id=228 op=LOAD
type=BPF msg=audit(1765872351.821:6445): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872351.821:6446): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765872351.840:6447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=nis-domainname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872351.846:6448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=nis-domainname comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872351.934:6449): pid=37400 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872351.934:6450): pid=37400 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872351.939:6451): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872351.939:6452): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872352.075:6453): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872352.075:6454): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872352.137:6455): pid=37459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872352.137:6456): pid=37459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6667796161766D7166787A63626B627872657879786177626C78636162686E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872352.138:6457): pid=37459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872352.142:6458): pid=37459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872352.315:6459): pid=37459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872352.316:6460): pid=37459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872352.320:6461): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872352.320:6462): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872352.454:6463): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872352.454:6464): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872352.506:6465): pid=37475 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872352.506:6466): pid=37475 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646B6D65627869786E61776F6A72776B6E6B746D686B636E6A6B656F726A7166203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872352.507:6467): pid=37475 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872352.508:6468): pid=37475 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872353.066:6469): pid=37475 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872353.067:6470): pid=37475 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872353.071:6471): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872353.071:6472): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872353.214:6473): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872353.214:6474): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872353.266:6475): pid=37496 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872353.267:6476): pid=37496 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7078677A616D6E76656972666F6F7A686D626866796F6F6F666F7664676A6A73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872353.268:6477): pid=37496 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872353.270:6478): pid=37496 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872353.816:6479): pid=37496 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872353.817:6480): pid=37496 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872353.821:6481): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872353.821:6482): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872353.955:6483): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872353.955:6484): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872354.017:6485): pid=37515 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872354.017:6486): pid=37515 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7A69716B6773616E756D7178696F73616B7175716F716E667877777363786C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872354.018:6487): pid=37515 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872354.020:6488): pid=37515 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872354.192:6489): pid=37515 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872354.193:6490): pid=37515 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872354.197:6491): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872354.197:6492): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872354.337:6493): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872354.337:6494): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872354.388:6495): pid=37531 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872354.389:6496): pid=37531 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756869727A6967616177696F716361676A64657373767A6B617276706C686463203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872354.389:6497): pid=37531 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872354.392:6498): pid=37531 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872354.580:6499): pid=37531 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872354.580:6500): pid=37531 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872354.584:6501): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872354.585:6502): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872354.694:6503): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872354.694:6504): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872354.750:6505): pid=37547 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872354.750:6506): pid=37547 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6E716F78646E79666F7A746B7661676E6E656E627278756468737078636864203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872354.751:6507): pid=37547 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872354.754:6508): pid=37547 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872354.945:6509): pid=37547 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872354.946:6510): pid=37547 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872354.950:6511): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872354.950:6512): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872355.148:6513): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872355.148:6514): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872355.212:6515): pid=37563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872355.212:6516): pid=37563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A75737076756C726D766670716E6D616471617379676A647A73777379687579203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872355.213:6517): pid=37563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872355.216:6518): pid=37563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872355.687:6519): prog-id=229 op=LOAD
type=BPF msg=audit(1765872355.687:6520): prog-id=230 op=LOAD
type=BPF msg=audit(1765872355.687:6521): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872355.687:6522): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872355.688:6523): prog-id=231 op=LOAD
type=BPF msg=audit(1765872355.689:6524): prog-id=232 op=LOAD
type=BPF msg=audit(1765872355.689:6525): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872355.689:6526): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872355.689:6527): prog-id=233 op=LOAD
type=BPF msg=audit(1765872355.689:6528): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872355.692:6529): prog-id=234 op=LOAD
type=BPF msg=audit(1765872355.692:6530): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872355.693:6531): prog-id=235 op=LOAD
type=BPF msg=audit(1765872355.693:6532): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872355.693:6533): prog-id=236 op=LOAD
type=BPF msg=audit(1765872355.693:6534): prog-id=237 op=LOAD
type=BPF msg=audit(1765872355.693:6535): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872355.693:6536): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872355.694:6537): prog-id=238 op=LOAD
type=BPF msg=audit(1765872355.694:6538): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872355.694:6539): prog-id=239 op=LOAD
type=BPF msg=audit(1765872355.694:6540): prog-id=240 op=LOAD
type=BPF msg=audit(1765872355.694:6541): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872355.694:6542): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765872355.748:6543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=certmonger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872355.779:6544): pid=37563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872355.779:6545): pid=37563 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872355.784:6546): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872355.784:6547): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765872367.562:6548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765872367.608:6549): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872367.608:6550): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1765872368.164:6551): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872368.164:6552): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872368.191:6553): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872368.191:6554): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872368.233:6555): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872368.233:6556): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872368.272:6557): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872368.272:6558): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872368.314:6559): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872368.314:6560): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872368.380:6561): pid=37682 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872368.380:6562): pid=37682 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A656963757268616E736171656571796A726F73716171756C74787377616E6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872368.381:6563): pid=37682 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872368.385:6564): pid=37682 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872368.550:6565): pid=37682 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872368.550:6566): pid=37682 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872368.554:6567): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872368.554:6568): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872368.596:6569): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872368.596:6570): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872368.634:6571): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872368.634:6572): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872368.676:6573): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872368.676:6574): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872368.709:6575): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872368.709:6576): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872368.751:6577): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872368.751:6578): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872368.810:6579): pid=37725 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872368.811:6580): pid=37725 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6961617567787162706663766862796671656E7078767A706262736271646474203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872368.811:6581): pid=37725 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872368.814:6582): pid=37725 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872368.982:6583): pid=37725 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872368.983:6584): pid=37725 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872368.986:6585): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872368.986:6586): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872369.028:6587): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872369.028:6588): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872369.050:6589): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872369.051:6590): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872369.187:6591): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872369.187:6592): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872369.230:6593): pid=37755 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872369.231:6594): pid=37755 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7875736A6F716B6F796277756E737267676D6977626D6163696A706B696C726A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872369.231:6595): pid=37755 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872369.233:6596): pid=37755 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872369.423:6597): pid=37755 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872369.423:6598): pid=37755 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872369.426:6599): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872369.426:6600): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872370.083:6601): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872370.083:6602): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872370.110:6603): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872370.110:6604): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872370.151:6605): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872370.151:6606): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872370.185:6607): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872370.185:6608): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872370.226:6609): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872370.227:6610): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872370.279:6611): pid=37805 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872370.280:6612): pid=37805 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7567687167646C6E7566756468686577667776787A6B776F7A7072656461676E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872370.280:6613): pid=37805 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872370.281:6614): pid=37805 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872370.454:6615): pid=37805 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872370.454:6616): pid=37805 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872370.456:6617): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872370.456:6618): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872370.498:6619): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872370.498:6620): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872370.530:6621): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872370.530:6622): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872370.574:6623): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872370.574:6624): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872370.601:6625): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872370.602:6626): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872370.643:6627): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872370.643:6628): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872370.696:6629): pid=37848 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872370.696:6630): pid=37848 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6471646D73636973656B7A6C697676736F6D6579766E677475796672716C7773203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872370.696:6631): pid=37848 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872370.698:6632): pid=37848 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872370.880:6633): pid=37848 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872370.880:6634): pid=37848 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872370.884:6635): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872370.884:6636): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872370.926:6637): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872370.926:6638): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872370.959:6639): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872370.959:6640): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872371.183:6641): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872371.183:6642): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872371.234:6643): pid=37878 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872371.235:6644): pid=37878 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76786161717A6E627461776477776F787265626B616F6D72776D66627A756572203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872371.235:6645): pid=37878 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872371.237:6646): pid=37878 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872371.391:6647): pid=37878 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872371.391:6648): pid=37878 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872371.395:6649): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872371.395:6650): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872371.739:6651): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872371.739:6652): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872371.763:6653): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872371.763:6654): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872371.814:6655): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872371.814:6656): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872371.847:6657): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872371.847:6658): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872371.889:6659): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872371.889:6660): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872371.948:6661): pid=37926 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872371.948:6662): pid=37926 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63646773617278687A6171626162646B7A6574616D6B76796667796E79627776203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872371.949:6663): pid=37926 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872371.951:6664): pid=37926 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872372.118:6665): pid=37926 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872372.119:6666): pid=37926 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872372.122:6667): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872372.122:6668): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872372.164:6669): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872372.164:6670): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872372.193:6671): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872372.193:6672): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872372.235:6673): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872372.235:6674): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872372.265:6675): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872372.265:6676): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872372.306:6677): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872372.307:6678): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872372.358:6679): pid=37969 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872372.358:6680): pid=37969 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C776D656873666365746F626967727062767A747664786C7A6A73766E78786D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872372.359:6681): pid=37969 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872372.361:6682): pid=37969 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872372.543:6683): pid=37969 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872372.543:6684): pid=37969 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872372.546:6685): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872372.546:6686): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872372.574:6687): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872372.575:6688): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872372.596:6689): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872372.596:6690): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872373.008:6691): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872373.008:6692): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872373.064:6693): pid=37999 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872373.065:6694): pid=37999 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D747A676764686C79776C6D796D616E7A7679767976746E6A74777279726E7565203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872373.065:6695): pid=37999 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872373.067:6696): pid=37999 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872373.255:6697): pid=37999 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872373.255:6698): pid=37999 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872373.258:6699): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872373.259:6700): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872374.921:6701): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872374.921:6702): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872374.980:6703): pid=38015 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872374.980:6704): pid=38015 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73667371626F6770706865656478796B7465616763726A776778727368747A70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872374.980:6705): pid=38015 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872374.982:6706): pid=38015 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872375.162:6707): pid=38015 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872375.162:6708): pid=38015 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872375.166:6709): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872375.166:6710): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872376.637:6711): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872376.637:6712): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872376.700:6713): pid=38032 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872376.700:6714): pid=38032 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7467796E666970696774716671666B6163646E657A71687762676F726571796E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872376.701:6715): pid=38032 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872376.704:6716): pid=38032 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872376.995:6717): pid=38032 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872376.995:6718): pid=38032 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872377.000:6719): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872377.000:6720): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872377.362:6721): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872377.362:6722): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872377.425:6723): pid=38052 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872377.425:6724): pid=38052 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6169627269687A6663717975776E7868776562776F6B656D75706F6276706673203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872377.426:6725): pid=38052 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872377.428:6726): pid=38052 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872380.285:6727): pid=38052 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872380.286:6728): pid=38052 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872380.290:6729): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872380.290:6730): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872380.431:6731): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872380.431:6732): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872380.498:6733): pid=38069 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872380.499:6734): pid=38069 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78786464787961726B746C65697569656770686673646161766E65786C716A69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872380.499:6735): pid=38069 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872380.502:6736): pid=38069 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872383.288:6737): pid=38069 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872383.288:6738): pid=38069 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872383.293:6739): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872383.293:6740): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872383.491:6741): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872383.491:6742): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872383.548:6743): pid=38086 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872383.548:6744): pid=38086 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726F75656F65766A656C747A797A7169777463646A71616C6E61727779666765203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872383.549:6745): pid=38086 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872383.551:6746): pid=38086 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872383.712:6747): pid=38086 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872383.712:6748): pid=38086 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872383.716:6749): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872383.716:6750): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872383.913:6751): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872383.914:6752): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872383.973:6753): pid=38102 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872383.973:6754): pid=38102 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6172747976717A72766B6A6D7A6A67636F6B6D727A7268637177786C74726A65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872383.974:6755): pid=38102 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872383.977:6756): pid=38102 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872384.151:6757): pid=38102 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872384.152:6758): pid=38102 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872384.155:6759): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872384.156:6760): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872384.319:6761): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872384.319:6762): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872384.380:6763): pid=38118 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872384.381:6764): pid=38118 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61636C6E657967637064646B69756A756673687A7170766D6A67647866756173203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872384.381:6765): pid=38118 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872384.383:6766): pid=38118 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872384.889:6767): prog-id=241 op=LOAD
type=BPF msg=audit(1765872384.889:6768): prog-id=242 op=LOAD
type=BPF msg=audit(1765872384.889:6769): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872384.889:6770): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872384.889:6771): prog-id=243 op=LOAD
type=BPF msg=audit(1765872384.889:6772): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872384.892:6773): prog-id=244 op=LOAD
type=BPF msg=audit(1765872384.892:6774): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872384.893:6775): prog-id=245 op=LOAD
type=BPF msg=audit(1765872384.893:6776): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872384.893:6777): prog-id=246 op=LOAD
type=BPF msg=audit(1765872384.893:6778): prog-id=247 op=LOAD
type=BPF msg=audit(1765872384.893:6779): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872384.893:6780): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872384.895:6781): prog-id=248 op=LOAD
type=BPF msg=audit(1765872384.895:6782): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872384.895:6783): prog-id=249 op=LOAD
type=BPF msg=audit(1765872384.895:6784): prog-id=250 op=LOAD
type=BPF msg=audit(1765872384.895:6785): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872384.895:6786): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765872384.922:6787): pid=38118 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872384.922:6788): pid=38118 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872384.927:6789): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872384.927:6790): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872385.238:6791): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872385.238:6792): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872385.306:6793): pid=38173 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872385.307:6794): pid=38173 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67786C74706E63716D686C6A6C64657965717A7378726B70786C6570746D7679203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872385.308:6795): pid=38173 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872385.311:6796): pid=38173 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872386.623:6797): pid=38173 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872386.623:6798): pid=38173 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872386.628:6799): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872386.628:6800): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872386.838:6801): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872386.838:6802): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872386.900:6803): pid=38220 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872386.900:6804): pid=38220 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C61647973706E68756D77636C767167786C7A706B7667787A7A6E6778746F63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872386.901:6805): pid=38220 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872386.904:6806): pid=38220 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872391.277:6807): prog-id=251 op=LOAD
type=BPF msg=audit(1765872391.278:6808): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872391.278:6809): prog-id=252 op=LOAD
type=BPF msg=audit(1765872391.278:6810): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872391.403:6811): prog-id=253 op=LOAD
type=BPF msg=audit(1765872391.403:6812): prog-id=254 op=LOAD
type=BPF msg=audit(1765872391.403:6813): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872391.403:6814): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872391.404:6815): prog-id=255 op=LOAD
type=BPF msg=audit(1765872391.404:6816): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872391.406:6817): prog-id=256 op=LOAD
type=BPF msg=audit(1765872391.406:6818): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872391.407:6819): prog-id=257 op=LOAD
type=BPF msg=audit(1765872391.407:6820): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872391.407:6821): prog-id=258 op=LOAD
type=BPF msg=audit(1765872391.408:6822): prog-id=259 op=LOAD
type=BPF msg=audit(1765872391.408:6823): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872391.408:6824): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872391.409:6825): prog-id=260 op=LOAD
type=BPF msg=audit(1765872391.409:6826): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872391.409:6827): prog-id=261 op=LOAD
type=BPF msg=audit(1765872391.409:6828): prog-id=262 op=LOAD
type=BPF msg=audit(1765872391.409:6829): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872391.409:6830): prog-id=0 op=UNLOAD
type=MAC_POLICY_LOAD msg=audit(1765872399.497:6831): auid=1002 ses=14 lsm=selinux res=1AUID="tripleo-admin"
type=SYSCALL msg=audit(1765872399.497:6831): arch=c000003e syscall=1 success=yes exit=3582545 a0=4 a1=7f4836600000 a2=36aa51 a3=0 items=0 ppid=38253 pid=38304 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872399.497:6831): proctitle="/usr/sbin/load_policy"
type=BPF msg=audit(1765872400.620:6832): prog-id=263 op=LOAD
type=BPF msg=audit(1765872400.620:6833): prog-id=264 op=LOAD
type=BPF msg=audit(1765872400.621:6834): prog-id=265 op=LOAD
type=BPF msg=audit(1765872400.621:6835): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872400.621:6836): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872400.621:6837): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872400.629:6838): prog-id=266 op=LOAD
type=BPF msg=audit(1765872400.630:6839): prog-id=267 op=LOAD
type=BPF msg=audit(1765872400.630:6840): prog-id=268 op=LOAD
type=BPF msg=audit(1765872400.630:6841): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872400.630:6842): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872400.630:6843): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872400.637:6844): prog-id=269 op=LOAD
type=BPF msg=audit(1765872400.637:6845): prog-id=270 op=LOAD
type=BPF msg=audit(1765872400.637:6846): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872400.637:6847): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765872400.782:6848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra22a645afa3341768c9b4005f3475d23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765872401.029:6849): prog-id=271 op=LOAD
type=BPF msg=audit(1765872401.029:6850): prog-id=272 op=LOAD
type=BPF msg=audit(1765872401.029:6851): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.029:6852): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.032:6853): prog-id=273 op=LOAD
type=BPF msg=audit(1765872401.032:6854): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.036:6855): prog-id=274 op=LOAD
type=BPF msg=audit(1765872401.036:6856): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.036:6857): prog-id=275 op=LOAD
type=BPF msg=audit(1765872401.036:6858): prog-id=276 op=LOAD
type=BPF msg=audit(1765872401.036:6859): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.036:6860): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.037:6861): prog-id=277 op=LOAD
type=BPF msg=audit(1765872401.037:6862): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.037:6863): prog-id=278 op=LOAD
type=BPF msg=audit(1765872401.037:6864): prog-id=279 op=LOAD
type=BPF msg=audit(1765872401.037:6865): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.037:6866): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.037:6867): prog-id=280 op=LOAD
type=BPF msg=audit(1765872401.038:6868): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765872401.086:6869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r381bebe67fe24968b4da70f19edffa62 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872401.123:6870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765872401.124:6871): prog-id=281 op=LOAD
type=BPF msg=audit(1765872401.124:6872): prog-id=282 op=LOAD
type=BPF msg=audit(1765872401.124:6873): prog-id=283 op=LOAD
type=BPF msg=audit(1765872401.131:6874): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.131:6875): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.131:6876): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765872401.133:6877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765872401.135:6878): prog-id=284 op=LOAD
type=BPF msg=audit(1765872401.135:6879): prog-id=285 op=LOAD
type=BPF msg=audit(1765872401.145:6880): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.145:6881): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765872401.146:6882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872401.185:6883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765872401.583:6884): prog-id=286 op=LOAD
type=BPF msg=audit(1765872401.583:6885): prog-id=287 op=LOAD
type=BPF msg=audit(1765872401.583:6886): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.583:6887): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.585:6888): prog-id=288 op=LOAD
type=BPF msg=audit(1765872401.585:6889): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.589:6890): prog-id=289 op=LOAD
type=BPF msg=audit(1765872401.589:6891): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.589:6892): prog-id=290 op=LOAD
type=BPF msg=audit(1765872401.589:6893): prog-id=291 op=LOAD
type=BPF msg=audit(1765872401.589:6894): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.589:6895): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.590:6896): prog-id=292 op=LOAD
type=BPF msg=audit(1765872401.590:6897): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.590:6898): prog-id=293 op=LOAD
type=BPF msg=audit(1765872401.590:6899): prog-id=294 op=LOAD
type=BPF msg=audit(1765872401.590:6900): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.590:6901): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872401.591:6902): prog-id=295 op=LOAD
type=BPF msg=audit(1765872401.591:6903): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765872401.977:6904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872401.977:6905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872401.978:6906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-ra22a645afa3341768c9b4005f3475d23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872401.980:6907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r381bebe67fe24968b4da70f19edffa62 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1765872402.253:6908): pid=38222 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-rpm-macros-252-14.el9_2.8.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872402.253:6909): pid=38222 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-libs-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872402.253:6910): pid=38222 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-pam-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872402.253:6911): pid=38222 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872402.253:6912): pid=38222 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="systemd-container-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765872402.253:6913): pid=38222 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="systemd-udev-252-14.el9_2.8.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1765872403.298:6914): pid=38220 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872403.298:6915): pid=38220 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872403.305:6916): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872403.305:6917): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872403.478:6918): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872403.478:6919): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872403.549:6920): pid=39716 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872403.549:6921): pid=39716 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67616D67696A6B736163646E6562737A6D6D706771776A6161616973646A706E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872403.550:6922): pid=39716 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872403.556:6923): pid=39716 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872403.741:6924): pid=39716 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872403.742:6925): pid=39716 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872403.746:6926): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872403.746:6927): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872403.934:6928): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872403.934:6929): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872404.003:6930): pid=39735 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872404.004:6931): pid=39735 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657166656169786B73616E717A667766786169627A77657665636D696F646963203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872404.004:6932): pid=39735 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872404.007:6933): pid=39735 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872404.213:6934): pid=39735 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872404.213:6935): pid=39735 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872404.216:6936): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872404.217:6937): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872404.787:6938): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872404.787:6939): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872404.853:6940): pid=39753 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872404.854:6941): pid=39753 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71636A6570746E787A6C6A6D66766677756B6E616764776F6A73746579786972203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872404.854:6942): pid=39753 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872404.857:6943): pid=39753 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872405.032:6944): pid=39753 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872405.032:6945): pid=39753 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872405.037:6946): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872405.037:6947): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872405.107:6948): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872405.107:6949): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872405.172:6950): pid=39769 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872405.172:6951): pid=39769 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78636E6C6362666A676775726B7A7A666B70797A6967696B6E726C756D666A76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872405.173:6952): pid=39769 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872405.176:6953): pid=39769 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872405.344:6954): pid=39769 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872405.345:6955): pid=39769 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872405.349:6956): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872405.349:6957): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872405.423:6958): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872405.423:6959): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872405.488:6960): pid=39785 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872405.488:6961): pid=39785 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A66656E7A7572666E6D62786465637779667774746668796B6961746C756C61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872405.489:6962): pid=39785 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872405.492:6963): pid=39785 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872405.669:6964): pid=39785 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872405.670:6965): pid=39785 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872405.673:6966): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872405.674:6967): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872405.976:6968): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872405.976:6969): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872406.034:6970): pid=39801 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872406.034:6971): pid=39801 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7273666D71796275736E636B6D6C6D666C73657A70726B7773786B61687A6E61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872406.035:6972): pid=39801 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872406.038:6973): pid=39801 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872406.295:6974): pid=39801 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872406.296:6975): pid=39801 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872406.301:6976): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872406.301:6977): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872406.571:6978): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872406.571:6979): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872406.635:6980): pid=39821 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872406.635:6981): pid=39821 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6D7564726873716F6A756A6776757A68686F6D6C6C747A7A6877786A646C72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872406.636:6982): pid=39821 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872406.638:6983): pid=39821 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872409.416:6984): pid=39821 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872409.416:6985): pid=39821 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872409.420:6986): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872409.420:6987): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872409.549:6988): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872409.549:6989): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872409.603:6990): pid=39838 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872409.603:6991): pid=39838 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796A766E666363766C64666872616D756474656C7A746F6A676B76776D71786E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872409.603:6992): pid=39838 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872409.605:6993): pid=39838 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872412.507:6994): pid=39838 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872412.507:6995): pid=39838 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872412.512:6996): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872412.512:6997): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872412.648:6998): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872412.648:6999): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872412.693:7000): pid=39855 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872412.693:7001): pid=39855 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65696F7675647163667165746273687378697562657576696466706F77677377203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872412.694:7002): pid=39855 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872412.696:7003): pid=39855 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872412.862:7004): pid=39855 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872412.862:7005): pid=39855 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872412.865:7006): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872412.865:7007): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872412.996:7008): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872412.996:7009): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872413.056:7010): pid=39871 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872413.056:7011): pid=39871 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6372747167776B657771676968647469686C62697A73776965697074656E7A70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872413.057:7012): pid=39871 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872413.060:7013): pid=39871 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872413.237:7014): pid=39871 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872413.237:7015): pid=39871 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872413.240:7016): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872413.240:7017): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872413.408:7018): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872413.408:7019): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872413.466:7020): pid=39887 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872413.466:7021): pid=39887 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D777661746B65756B6A7970766565706E6E676F6B706F6C756C6562736D6D6A69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872413.467:7022): pid=39887 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872413.469:7023): pid=39887 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872413.763:7024): pid=39887 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872413.764:7025): pid=39887 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872413.767:7026): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872413.767:7027): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872414.211:7028): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872414.211:7029): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872414.264:7030): pid=39905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872414.264:7031): pid=39905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7265687175646F6B67737568626A6C6E6F696F7771646572796C67626C637264203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872414.264:7032): pid=39905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872414.267:7033): pid=39905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872415.536:7034): pid=39905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872415.536:7035): pid=39905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872415.540:7036): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872415.540:7037): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872415.819:7038): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872415.819:7039): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872415.884:7040): pid=39956 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872415.884:7041): pid=39956 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766A6A796C796E67646262766D75636E7A7372737A6A736D6D6962796E726264203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872415.884:7042): pid=39956 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872415.887:7043): pid=39956 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872417.173:7044): pid=39956 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872417.174:7045): pid=39956 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872417.179:7046): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872417.179:7047): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872417.512:7048): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872417.512:7049): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872417.563:7050): pid=40003 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872417.563:7051): pid=40003 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6674777776646D697669757871676E7967696F6E746463797476736B79786563203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872417.563:7052): pid=40003 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872417.566:7053): pid=40003 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872418.634:7054): pid=40003 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872418.635:7055): pid=40003 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872418.638:7056): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872418.638:7057): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872418.959:7058): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872418.959:7059): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872419.020:7060): pid=40044 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872419.021:7061): pid=40044 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666B7066677561716A66766D6C63766877756365786D766A6C75626B6E666D67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872419.021:7062): pid=40044 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872419.024:7063): pid=40044 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872420.257:7064): pid=40044 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872420.257:7065): pid=40044 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872420.261:7066): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872420.261:7067): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872420.658:7068): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872420.658:7069): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872420.717:7070): pid=40082 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872420.717:7071): pid=40082 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616F726D6B617876647979706A6E776D73657377636C666B6864616972617363203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872420.718:7072): pid=40082 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872420.720:7073): pid=40082 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872428.248:7074): pid=40082 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872428.249:7075): pid=40082 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872428.252:7076): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872428.252:7077): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872428.335:7078): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872428.335:7079): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872428.389:7080): pid=40195 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872428.389:7081): pid=40195 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70617171706971616364626A74646C686C6D696B7A796B72636A6579636D6B70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872428.390:7082): pid=40195 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872428.392:7083): pid=40195 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872436.258:7084): pid=40195 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872436.258:7085): pid=40195 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872436.263:7086): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872436.263:7087): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872436.348:7088): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872436.349:7089): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872436.392:7090): pid=40308 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872436.393:7091): pid=40308 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6278736F6B6F6D747A716B646A627A75796B6974696A66747273666C697568203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872436.393:7092): pid=40308 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872436.396:7093): pid=40308 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872451.313:7094): pid=40308 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872451.314:7095): pid=40308 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872451.318:7096): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872451.318:7097): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872451.399:7098): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872451.399:7099): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872451.462:7100): pid=41260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872451.463:7101): pid=41260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73697A6C6C7471646E76767A66656E627865796866697966676C6A667A6B7173203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872451.464:7102): pid=41260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872451.467:7103): pid=41260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872466.335:7104): pid=41260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872466.335:7105): pid=41260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872466.340:7106): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872466.340:7107): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872466.412:7108): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872466.412:7109): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872466.464:7110): pid=41351 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872466.465:7111): pid=41351 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6174756B696961726D776D6364697773696A6F66777768786A6B757378677661203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872466.465:7112): pid=41351 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872466.467:7113): pid=41351 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872479.268:7114): pid=41351 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872479.269:7115): pid=41351 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872479.274:7116): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872479.274:7117): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872479.362:7118): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872479.362:7119): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872479.411:7120): pid=41486 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872479.411:7121): pid=41486 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E786269716F79726A776B657266636D72646E68727061697276796463766674203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872479.412:7122): pid=41486 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872479.415:7123): pid=41486 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872483.909:7124): pid=41486 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872483.909:7125): pid=41486 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872483.914:7126): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872483.914:7127): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872483.988:7128): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872483.988:7129): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872484.049:7130): pid=41577 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872484.050:7131): pid=41577 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7675717A676E716C746F6B61786A64677263726773786C6F71696578646E7262203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872484.050:7132): pid=41577 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872484.053:7133): pid=41577 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872486.799:7134): pid=41577 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872486.800:7135): pid=41577 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872486.804:7136): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872486.804:7137): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872486.887:7138): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872486.887:7139): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872486.943:7140): pid=41670 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872486.943:7141): pid=41670 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6670716C797779677878746E706D6D6579787265766C7269796C69697A716B74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872486.943:7142): pid=41670 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872486.946:7143): pid=41670 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872489.830:7144): pid=41670 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872489.830:7145): pid=41670 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872489.834:7146): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872489.834:7147): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872489.923:7148): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872489.923:7149): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872489.985:7150): pid=41756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872489.985:7151): pid=41756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7674786A676C74706478676C6F6363686A6A696D6A637577736C61666B746A6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872489.986:7152): pid=41756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872489.988:7153): pid=41756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872498.344:7154): pid=41756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872498.345:7155): pid=41756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872498.349:7156): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872498.349:7157): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872498.447:7158): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872498.447:7159): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872498.498:7160): pid=41847 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872498.498:7161): pid=41847 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C63716D70736E7973717A65666E7A69747473757571786474716D786E797466203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872498.498:7162): pid=41847 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872498.500:7163): pid=41847 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872502.745:7164): pid=41847 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872502.745:7165): pid=41847 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872502.749:7166): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872502.749:7167): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872502.799:7168): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872502.799:7169): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872502.856:7170): pid=41949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872502.856:7171): pid=41949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6463746873706F627A687A726175626F767461616E6D78767779766F6C707476203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872502.857:7172): pid=41949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872502.860:7173): pid=41949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872505.146:7174): pid=41949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872505.147:7175): pid=41949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872505.151:7176): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872505.151:7177): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872505.832:7178): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872505.832:7179): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872505.892:7180): pid=42039 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872505.892:7181): pid=42039 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6F676C6C6A73677674677279726A6C6A6C686E77796C70617677767976656A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872505.893:7182): pid=42039 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872505.896:7183): pid=42039 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872506.182:7184): pid=42039 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872506.182:7185): pid=42039 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872506.186:7186): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872506.186:7187): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872506.487:7188): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872506.488:7189): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872506.548:7190): pid=42059 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872506.548:7191): pid=42059 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6364676978737078726D69726D6E617A7A7467686E63716D6976757669716D6B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872506.549:7192): pid=42059 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872506.552:7193): pid=42059 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872509.352:7194): pid=42059 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872509.353:7195): pid=42059 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872509.357:7196): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872509.357:7197): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872509.500:7198): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872509.500:7199): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872509.564:7200): pid=42076 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872509.564:7201): pid=42076 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696A706F777668667364676E7463756B7968737A686B6A6C7675697A726A6675203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872509.565:7202): pid=42076 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872509.567:7203): pid=42076 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872512.673:7204): pid=42076 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872512.674:7205): pid=42076 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872512.678:7206): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872512.678:7207): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872512.856:7208): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872512.856:7209): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872512.909:7210): pid=42260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872512.910:7211): pid=42260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F676B6663717678676972616F6E6D7A61706C6A66786670756366646B786A6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872512.910:7212): pid=42260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872512.912:7213): pid=42260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872513.085:7214): pid=42260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872513.086:7215): pid=42260 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872513.089:7216): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872513.089:7217): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872513.236:7218): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872513.236:7219): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872513.292:7220): pid=42276 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872513.292:7221): pid=42276 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7A657074796A616B73796B746973716B656A726D6172766B64707675776772203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872513.292:7222): pid=42276 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872513.294:7223): pid=42276 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872513.469:7224): pid=42276 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872513.470:7225): pid=42276 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872513.478:7226): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872513.478:7227): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872513.640:7228): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872513.640:7229): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872513.701:7230): pid=42292 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872513.701:7231): pid=42292 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79707870746C696F6B636B786B686778627374696F6E72767A70697167776F61203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872513.702:7232): pid=42292 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872513.704:7233): pid=42292 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872514.020:7234): pid=42292 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872514.021:7235): pid=42292 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872514.025:7236): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872514.025:7237): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872514.534:7238): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872514.534:7239): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872514.601:7240): pid=42310 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872514.601:7241): pid=42310 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77626B6C6264756C7370796C796F707A79776A78617A6E787771706F63696E73203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872514.602:7242): pid=42310 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872514.604:7243): pid=42310 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872516.047:7244): pid=42310 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872516.048:7245): pid=42310 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872516.052:7246): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872516.052:7247): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872516.463:7248): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872516.463:7249): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872516.527:7250): pid=42342 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872516.527:7251): pid=42342 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7365787366656768666D64717970687573746E776D6A77617165756F6A6B7770203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872516.528:7252): pid=42342 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872516.530:7253): pid=42342 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872517.403:7254): pid=42342 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872517.403:7255): pid=42342 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872517.407:7256): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872517.407:7257): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872517.738:7258): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872517.738:7259): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872517.800:7260): pid=42362 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872517.801:7261): pid=42362 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6C66776C7479756265616E747A7374736F75677769746A677176756465616B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872517.801:7262): pid=42362 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872517.803:7263): pid=42362 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872520.602:7264): pid=42362 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872520.602:7265): pid=42362 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872520.773:7266): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872520.773:7267): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872520.940:7268): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872520.940:7269): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872520.992:7270): pid=42379 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872520.992:7271): pid=42379 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69676B73686275676D66726E6F6166727375796465706B796A6A67716F6B6363203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872520.993:7272): pid=42379 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872520.995:7273): pid=42379 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872523.739:7274): pid=42379 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872523.740:7275): pid=42379 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872523.744:7276): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872523.744:7277): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872523.909:7278): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872523.909:7279): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872523.969:7280): pid=42396 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872523.969:7281): pid=42396 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69786C78737661646C756E626A706B7166737A6C686378707676647267756C66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872523.969:7282): pid=42396 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872523.971:7283): pid=42396 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872524.150:7284): pid=42396 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872524.150:7285): pid=42396 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872524.154:7286): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872524.154:7287): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872524.515:7288): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872524.515:7289): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872524.574:7290): pid=42412 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872524.575:7291): pid=42412 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6A62737A6D77617177727561656D706E637273756D63746F7A686C64646179203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872524.575:7292): pid=42412 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872524.577:7293): pid=42412 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872524.759:7294): pid=42412 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872524.759:7295): pid=42412 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872524.764:7296): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872524.764:7297): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872524.949:7298): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872524.950:7299): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872525.014:7300): pid=42428 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872525.015:7301): pid=42428 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D666162656C6870677A687761756F696674646B6D7074646F766F6379776163203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872525.015:7302): pid=42428 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872525.017:7303): pid=42428 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872525.323:7304): pid=42428 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872525.323:7305): pid=42428 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872525.328:7306): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872525.328:7307): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872525.713:7308): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872525.713:7309): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872525.775:7310): pid=42446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872525.776:7311): pid=42446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C756E6363757A64796E6A746E65787A66626B677362786E756E796C6A73796F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872525.776:7312): pid=42446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872525.779:7313): pid=42446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872526.990:7314): pid=42446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872526.990:7315): pid=42446 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872526.994:7316): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872526.994:7317): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872527.086:7318): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872527.086:7319): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872527.143:7320): pid=42478 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872527.144:7321): pid=42478 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D69676C6C746C756961776A75647568657068676A70736576796D7177756B6F6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872527.144:7322): pid=42478 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872527.146:7323): pid=42478 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872527.321:7324): pid=42478 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872527.322:7325): pid=42478 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872527.326:7326): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872527.326:7327): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872527.565:7328): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872527.565:7329): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872527.596:7330): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872527.596:7331): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872527.638:7332): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872527.638:7333): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872527.673:7334): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872527.673:7335): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872527.715:7336): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872527.715:7337): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872527.771:7338): pid=42528 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872527.771:7339): pid=42528 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A636B6A696D6F69726879636B747364626E6D707A69696E6D61616466656770203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872527.772:7340): pid=42528 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872527.774:7341): pid=42528 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872527.943:7342): pid=42528 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872527.943:7343): pid=42528 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872527.947:7344): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872527.947:7345): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872527.989:7346): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872527.989:7347): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872528.044:7348): pid=42546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872528.045:7349): pid=42546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67616A6E76676767786B61786E6B7679716B66756D72716969796F62756D7369203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872528.045:7350): pid=42546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872528.047:7351): pid=42546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872528.214:7352): pid=42546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872528.214:7353): pid=42546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872528.218:7354): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872528.218:7355): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872528.260:7356): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872528.260:7357): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872528.287:7358): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872528.287:7359): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872528.404:7360): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872528.405:7361): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872528.433:7362): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872528.433:7363): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872528.475:7364): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872528.475:7365): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872528.510:7366): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872528.510:7367): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872528.552:7368): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872528.552:7369): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872528.592:7370): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872528.592:7371): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872528.634:7372): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872528.634:7373): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872528.673:7374): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872528.673:7375): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872528.728:7376): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872528.728:7377): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872528.760:7378): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872528.761:7379): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872528.804:7380): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872528.804:7381): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872528.867:7382): pid=42650 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872528.868:7383): pid=42650 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7179756C736D736369746D7361747169767763767A636865646B666C687166203B20414E5349424C455F4153594E435F4449523D2F746D702F2E616E7369626C655F6173796E63202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353837323532382E343034343035382D3130393638362D37373737383032373731383332382F6173796E635F777261707065722E7079203132363837363033323631372033363030202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353837323532382E343034343035382D3130393638362D37373737383032373731383332382F416E736962616C6C5A5F636F6D6D616E642E7079205F exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872528.869:7384): pid=42650 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872528.871:7385): pid=42650 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872529.049:7386): pid=42650 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872529.049:7387): pid=42650 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872529.053:7388): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872529.053:7389): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872529.154:7390): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872529.154:7391): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872529.210:7392): pid=42671 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872529.210:7393): pid=42671 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C706665656D73747978676A766C687A716B7376706B6264627376716E6E636E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872529.211:7394): pid=42671 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872529.213:7395): pid=42671 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872529.372:7396): pid=42671 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872529.372:7397): pid=42671 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872529.376:7398): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872529.376:7399): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872539.439:7400): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872539.439:7401): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872539.493:7402): pid=42805 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872539.493:7403): pid=42805 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6562666B756B657173767372727169646C636B716479696173796C64706F6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872539.494:7404): pid=42805 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872539.497:7405): pid=42805 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872539.663:7406): pid=42805 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872539.663:7407): pid=42805 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872539.667:7408): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872539.667:7409): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872540.096:7410): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872540.096:7411): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872540.160:7412): pid=42821 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872540.160:7413): pid=42821 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67646665737A647A777A616578746D6B68697372796D66706E727861776A6775203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872540.161:7414): pid=42821 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872540.163:7415): pid=42821 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872540.347:7416): pid=42821 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872540.348:7417): pid=42821 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872540.352:7418): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872540.352:7419): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872540.440:7420): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872540.440:7421): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872540.499:7422): pid=42837 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872540.500:7423): pid=42837 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6861697A766A6B7874647372796D73676B7868676F696C756276627961666F79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872540.500:7424): pid=42837 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872540.503:7425): pid=42837 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872540.677:7426): pid=42837 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872540.678:7427): pid=42837 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872540.680:7428): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872540.680:7429): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872540.858:7430): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872540.859:7431): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872540.890:7432): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872540.890:7433): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872540.932:7434): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872540.932:7435): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872540.968:7436): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872540.968:7437): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872541.009:7438): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872541.009:7439): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872541.070:7440): pid=42885 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872541.072:7441): pid=42885 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7074766D7A736F797A726E6A6965786D686D6A7178656D7A7073707973786C62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872541.072:7442): pid=42885 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872541.075:7443): pid=42885 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872541.253:7444): pid=42885 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872541.253:7445): pid=42885 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872541.257:7446): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872541.257:7447): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872541.299:7448): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872541.299:7449): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872541.349:7450): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872541.349:7451): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872541.390:7452): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872541.391:7453): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872541.423:7454): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872541.423:7455): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872541.465:7456): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872541.465:7457): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872541.525:7458): pid=42928 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872541.525:7459): pid=42928 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6B7A6A636875776F66626E6A79666C6172646176786770757069687A776C71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872541.525:7460): pid=42928 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872541.528:7461): pid=42928 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872541.719:7462): pid=42928 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872541.720:7463): pid=42928 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872541.724:7464): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872541.724:7465): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872541.766:7466): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872541.766:7467): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872541.795:7468): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872541.795:7469): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872541.864:7470): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872541.865:7471): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872541.926:7472): pid=42958 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872541.926:7473): pid=42958 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647072737872766171706E616F6B626E6C77796163676D697A726164706E7574203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872541.928:7474): pid=42958 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872541.930:7475): pid=42958 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872542.103:7476): pid=42958 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872542.104:7477): pid=42958 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872542.108:7478): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872542.108:7479): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872542.225:7480): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872542.226:7481): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872542.276:7482): pid=42974 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872542.276:7483): pid=42974 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64706A677177736C6F6C63706E78787070667A6F6E68727A697573787278646A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872542.277:7484): pid=42974 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872542.278:7485): pid=42974 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872542.796:7486): pid=42974 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872542.796:7487): pid=42974 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872542.801:7488): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872542.801:7489): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872542.991:7490): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872542.991:7491): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872543.052:7492): pid=43061 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872543.052:7493): pid=43061 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61696D7774716D7874756E706B6F667678756C6A6E79767761746A6465617876203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872543.053:7494): pid=43061 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872543.056:7495): pid=43061 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872543.284:7496): pid=43061 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872543.285:7497): pid=43061 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872543.288:7498): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872543.289:7499): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872543.507:7500): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872543.507:7501): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872543.554:7502): pid=43080 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872543.555:7503): pid=43080 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75646D7675696B78676D7579797A7961746B656C6E6266726A6268696F61797A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872543.555:7504): pid=43080 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872543.558:7505): pid=43080 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872543.725:7506): pid=43080 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872543.726:7507): pid=43080 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872543.729:7508): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872543.729:7509): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872543.852:7510): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872543.852:7511): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872543.911:7512): pid=43096 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872543.911:7513): pid=43096 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686D6D756969636B797564677162737377717A7263706162617A73696F63656C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872543.912:7514): pid=43096 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872543.915:7515): pid=43096 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872544.114:7516): pid=43096 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872544.114:7517): pid=43096 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872544.118:7518): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872544.118:7519): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872544.381:7520): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872544.381:7521): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872544.442:7522): pid=43112 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872544.442:7523): pid=43112 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6171637562786268646D78656D7067746C73747973667A67697066646D676F79203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872544.443:7524): pid=43112 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872544.445:7525): pid=43112 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872544.622:7526): pid=43112 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872544.622:7527): pid=43112 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872544.625:7528): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872544.625:7529): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872544.738:7530): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872544.738:7531): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872544.788:7532): pid=43128 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872544.788:7533): pid=43128 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F61756462697877716D6C766D6B626B636E64797368766F65726A79746F776F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872544.789:7534): pid=43128 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872544.792:7535): pid=43128 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872544.978:7536): pid=43128 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872544.978:7537): pid=43128 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872544.981:7538): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872544.982:7539): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872545.375:7540): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872545.375:7541): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872545.426:7542): pid=43144 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872545.426:7543): pid=43144 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67757567797A7475646E6362626B716A6D7071666E636E616E72657A707A6665203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872545.427:7544): pid=43144 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872545.429:7545): pid=43144 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872545.651:7546): pid=43144 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872545.652:7547): pid=43144 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872545.656:7548): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872545.656:7549): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872545.959:7550): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872545.960:7551): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872546.024:7552): pid=43172 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872546.025:7553): pid=43172 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F776C637271727169706A7069766A6277646E6271767A6D6F71696B64737777203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872546.026:7554): pid=43172 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872546.029:7555): pid=43172 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872546.685:7556): prog-id=296 op=LOAD
type=SYSCALL msg=audit(1765872546.685:7556): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff1004f790 a2=90 a3=9500000000 items=0 ppid=43429 pid=43430 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872546.685:7556): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F646664303233376235626232393433643562623136316237303632623862
type=BPF msg=audit(1765872546.688:7557): prog-id=297 op=LOAD
type=SYSCALL msg=audit(1765872546.688:7557): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe15127ea0 a2=90 a3=9500000000 items=0 ppid=43436 pid=43437 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872546.688:7557): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323434383237346661633035366565623634313338623538303362626238
type=BPF msg=audit(1765872546.715:7558): prog-id=298 op=LOAD
type=SYSCALL msg=audit(1765872546.715:7558): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd345e6180 a2=90 a3=9500000000 items=0 ppid=43441 pid=43442 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872546.715:7558): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F626333613433326535303563613830353166316130636238333834376330
type=BPF msg=audit(1765872546.726:7559): prog-id=299 op=LOAD
type=SYSCALL msg=audit(1765872546.726:7559): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff7bd86910 a2=90 a3=9500000000 items=0 ppid=43446 pid=43447 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872546.726:7559): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F656566633464366130633032623439656562333836336638336634343137
type=BPF msg=audit(1765872546.729:7560): prog-id=300 op=LOAD
type=SYSCALL msg=audit(1765872546.729:7560): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd711d8370 a2=90 a3=9500000000 items=0 ppid=43449 pid=43450 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872546.729:7560): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343766306235623032303730646636343162313966313638613930303238
type=BPF msg=audit(1765872548.649:7561): prog-id=301 op=LOAD
type=SYSCALL msg=audit(1765872548.649:7561): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd3a63e410 a2=90 a3=9500000000 items=0 ppid=43859 pid=43860 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872548.649:7561): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376531393338306363343938633438633162336565613061313038663831
type=BPF msg=audit(1765872548.901:7562): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872549.226:7563): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872549.401:7564): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872549.429:7565): prog-id=302 op=LOAD
type=SYSCALL msg=audit(1765872549.429:7565): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffee2404c40 a2=90 a3=9500000000 items=0 ppid=44155 pid=44158 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872549.429:7565): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F656634346635316233303862633763343339656236633236356465366632
type=BPF msg=audit(1765872549.616:7566): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872549.908:7567): prog-id=303 op=LOAD
type=SYSCALL msg=audit(1765872549.908:7567): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff693cd820 a2=90 a3=9500000000 items=0 ppid=44337 pid=44338 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872549.908:7567): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F313438346335316663623537616166343331643232346339313164636435
type=BPF msg=audit(1765872552.015:7568): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872552.077:7569): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872552.782:7570): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872553.574:7571): prog-id=304 op=LOAD
type=SYSCALL msg=audit(1765872553.574:7571): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff6b8d8010 a2=90 a3=9500000000 items=0 ppid=44871 pid=44872 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872553.574:7571): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F626435353764316335663231626563656437393161333733636263396664
type=BPF msg=audit(1765872555.286:7572): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872557.318:7573): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765872557.639:7574): pid=43172 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872557.639:7575): pid=43172 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872557.644:7576): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872557.644:7577): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872558.212:7578): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872558.213:7579): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872558.281:7580): pid=45120 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872558.281:7581): pid=45120 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6F766D6C77616F7A7470777979766664626E6378636878636C627465737761203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872558.282:7582): pid=45120 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872558.287:7583): pid=45120 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872558.468:7584): pid=45120 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872558.468:7585): pid=45120 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872558.473:7586): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872558.473:7587): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872558.585:7588): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872558.585:7589): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872558.636:7590): pid=45136 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872558.637:7591): pid=45136 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786167647573626F676172736463657771766F73616968716461736564786C77203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872558.637:7592): pid=45136 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872558.639:7593): pid=45136 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872558.816:7594): pid=45136 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872558.817:7595): pid=45136 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872558.821:7596): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872558.821:7597): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872559.109:7598): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872559.110:7599): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872559.169:7600): pid=45152 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872559.170:7601): pid=45152 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756D63696E6B797364716C7572776469767877617362616B656C736F69696865203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872559.171:7602): pid=45152 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872559.173:7603): pid=45152 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872559.347:7604): pid=45152 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872559.347:7605): pid=45152 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872559.351:7606): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872559.351:7607): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872559.541:7608): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872559.541:7609): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872559.572:7610): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872559.572:7611): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872559.614:7612): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872559.614:7613): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872559.652:7614): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872559.652:7615): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872559.694:7616): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872559.694:7617): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872559.756:7618): pid=45202 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872559.756:7619): pid=45202 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686B6171756F61686C71676C65747768726161707A796F6B6772616B75646169203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872559.757:7620): pid=45202 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872559.759:7621): pid=45202 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872559.935:7622): pid=45202 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872559.936:7623): pid=45202 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872559.939:7624): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872559.940:7625): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872559.981:7626): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872559.982:7627): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872560.019:7628): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872560.019:7629): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872560.061:7630): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872560.061:7631): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872560.083:7632): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872560.084:7633): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872560.125:7634): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872560.125:7635): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872560.185:7636): pid=45245 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872560.185:7637): pid=45245 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626A75657272796764696D677864756A6B797371616C776F6770696761747161203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872560.186:7638): pid=45245 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872560.189:7639): pid=45245 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872560.361:7640): pid=45245 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872560.362:7641): pid=45245 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872560.366:7642): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872560.366:7643): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872560.408:7644): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872560.408:7645): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872560.438:7646): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872560.438:7647): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872560.509:7648): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872560.510:7649): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872560.540:7650): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872560.540:7651): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872560.582:7652): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872560.582:7653): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872560.618:7654): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872560.618:7655): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872560.663:7656): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872560.663:7657): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872560.723:7658): pid=45307 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872560.724:7659): pid=45307 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64776F70687A64666F6469726F6265746C77636C736A74667277756B6A706D66203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872560.724:7660): pid=45307 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872560.726:7661): pid=45307 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872560.894:7662): pid=45307 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872560.894:7663): pid=45307 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872560.899:7664): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872560.899:7665): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872560.934:7666): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872560.935:7667): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872560.971:7668): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872560.971:7669): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872561.012:7670): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872561.013:7671): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872561.044:7672): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872561.044:7673): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872561.086:7674): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872561.086:7675): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872561.148:7676): pid=45350 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872561.149:7677): pid=45350 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687567776B6A6B7771617576637264766C736F6B7A6572667662646C67616A77203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872561.149:7678): pid=45350 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872561.151:7679): pid=45350 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872561.339:7680): pid=45350 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872561.340:7681): pid=45350 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872561.343:7682): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872561.343:7683): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872561.371:7684): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872561.371:7685): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872561.399:7686): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872561.400:7687): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872561.631:7688): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872561.631:7689): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872561.659:7690): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872561.659:7691): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872561.701:7692): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872561.701:7693): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872561.735:7694): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872561.735:7695): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872561.776:7696): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872561.776:7697): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872561.837:7698): pid=45412 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872561.837:7699): pid=45412 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676363796A6D7774616F6C69617864626B706A7575786E6B6B7271796F787477203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872561.838:7700): pid=45412 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872561.840:7701): pid=45412 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872562.008:7702): pid=45412 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872562.008:7703): pid=45412 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872562.012:7704): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872562.013:7705): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872562.055:7706): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872562.055:7707): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872562.088:7708): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872562.089:7709): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872562.130:7710): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872562.130:7711): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872562.159:7712): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872562.159:7713): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872562.201:7714): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872562.201:7715): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872562.256:7716): pid=45455 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872562.256:7717): pid=45455 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E65616563626F6D6F73706C6D7A6673786571786568757962656A6461696E72203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872562.256:7718): pid=45455 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872562.258:7719): pid=45455 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872562.436:7720): pid=45455 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872562.436:7721): pid=45455 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872562.439:7722): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872562.440:7723): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872562.481:7724): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872562.481:7725): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872562.509:7726): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872562.509:7727): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872562.618:7728): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872562.618:7729): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872562.649:7730): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872562.649:7731): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872562.690:7732): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872562.690:7733): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872562.725:7734): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872562.725:7735): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872562.767:7736): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872562.767:7737): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872562.832:7738): pid=45517 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872562.832:7739): pid=45517 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B797966656C61707674646F6D74626D78786D6E6170726C7471627274777076203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872562.832:7740): pid=45517 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872562.835:7741): pid=45517 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872562.993:7742): pid=45517 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872562.993:7743): pid=45517 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872562.997:7744): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872562.997:7745): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872563.038:7746): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872563.039:7747): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872563.074:7748): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872563.074:7749): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872563.116:7750): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872563.116:7751): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872563.147:7752): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872563.147:7753): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872563.189:7754): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872563.189:7755): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872563.251:7756): pid=45560 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872563.251:7757): pid=45560 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6C6B6B61687A7078646A61756C7A78776C7566696668677677676B66706F76203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872563.252:7758): pid=45560 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872563.254:7759): pid=45560 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872563.440:7760): pid=45560 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872563.440:7761): pid=45560 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872563.444:7762): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872563.444:7763): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872563.486:7764): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872563.486:7765): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872563.517:7766): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872563.517:7767): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872563.644:7768): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872563.644:7769): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872563.706:7770): pid=45590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872563.706:7771): pid=45590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696A706C65756E6274686F7A6579687774726E6A697A6A65737A6E6D676F6E61203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872563.707:7772): pid=45590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872563.709:7773): pid=45590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872564.242:7774): prog-id=305 op=LOAD
type=BPF msg=audit(1765872564.242:7775): prog-id=306 op=LOAD
type=BPF msg=audit(1765872564.242:7776): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872564.242:7777): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872564.244:7778): prog-id=307 op=LOAD
type=BPF msg=audit(1765872564.244:7779): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872564.248:7780): prog-id=308 op=LOAD
type=BPF msg=audit(1765872564.248:7781): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872564.248:7782): prog-id=309 op=LOAD
type=BPF msg=audit(1765872564.248:7783): prog-id=310 op=LOAD
type=BPF msg=audit(1765872564.248:7784): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872564.248:7785): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872564.249:7786): prog-id=311 op=LOAD
type=BPF msg=audit(1765872564.249:7787): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872564.249:7788): prog-id=312 op=LOAD
type=BPF msg=audit(1765872564.249:7789): prog-id=313 op=LOAD
type=BPF msg=audit(1765872564.249:7790): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872564.250:7791): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872564.250:7792): prog-id=314 op=LOAD
type=BPF msg=audit(1765872564.250:7793): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872564.485:7794): prog-id=315 op=LOAD
type=BPF msg=audit(1765872564.485:7795): prog-id=316 op=LOAD
type=BPF msg=audit(1765872564.485:7796): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872564.485:7797): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872564.487:7798): prog-id=317 op=LOAD
type=BPF msg=audit(1765872564.487:7799): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872564.491:7800): prog-id=318 op=LOAD
type=BPF msg=audit(1765872564.491:7801): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872564.491:7802): prog-id=319 op=LOAD
type=BPF msg=audit(1765872564.492:7803): prog-id=320 op=LOAD
type=BPF msg=audit(1765872564.492:7804): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872564.492:7805): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872564.492:7806): prog-id=321 op=LOAD
type=BPF msg=audit(1765872564.493:7807): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872564.493:7808): prog-id=322 op=LOAD
type=BPF msg=audit(1765872564.493:7809): prog-id=323 op=LOAD
type=BPF msg=audit(1765872564.493:7810): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872564.493:7811): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872564.494:7812): prog-id=324 op=LOAD
type=BPF msg=audit(1765872564.494:7813): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765872564.513:7814): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo-container-shutdown comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872564.542:7815): pid=45590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872564.543:7816): pid=45590 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872564.547:7817): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872564.547:7818): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872564.714:7819): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872564.714:7820): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872564.743:7821): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872564.743:7822): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872564.785:7823): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872564.785:7824): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872564.819:7825): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872564.819:7826): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872564.866:7827): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872564.866:7828): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872564.921:7829): pid=45714 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872564.921:7830): pid=45714 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6171617172776175766F776663646E676E65727279756572766D646A6E787563203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872564.922:7831): pid=45714 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872564.926:7832): pid=45714 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872565.055:7833): pid=45714 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872565.055:7834): pid=45714 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872565.060:7835): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872565.060:7836): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872565.104:7837): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872565.104:7838): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872565.134:7839): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872565.134:7840): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872565.176:7841): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872565.176:7842): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872565.208:7843): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872565.208:7844): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872565.250:7845): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872565.250:7846): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872565.310:7847): pid=45757 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872565.311:7848): pid=45757 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68647574737A6A6867776569616B6966696E65637A7475697A6F726D626B6770203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872565.311:7849): pid=45757 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872565.313:7850): pid=45757 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872565.494:7851): pid=45757 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872565.494:7852): pid=45757 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872565.498:7853): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872565.499:7854): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872565.540:7855): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872565.540:7856): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872565.566:7857): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872565.567:7858): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872565.671:7859): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872565.671:7860): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872565.700:7861): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872565.701:7862): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872565.741:7863): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872565.742:7864): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872565.778:7865): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872565.778:7866): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872565.820:7867): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872565.820:7868): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872565.876:7869): pid=45819 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872565.877:7870): pid=45819 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7062636876706662796E77646B6D61616B757A68676679697478687A7A6D6D62203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872565.877:7871): pid=45819 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872565.878:7872): pid=45819 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872566.007:7873): pid=45819 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872566.008:7874): pid=45819 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872566.011:7875): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872566.012:7876): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872566.053:7877): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872566.053:7878): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872566.088:7879): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872566.088:7880): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872566.130:7881): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872566.130:7882): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872566.159:7883): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872566.159:7884): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872566.201:7885): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872566.201:7886): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872566.257:7887): pid=45862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872566.258:7888): pid=45862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636971667A6D7A6976776E68636A6E70786B6E6871697669657A64706F736775203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872566.258:7889): pid=45862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872566.261:7890): pid=45862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872566.490:7891): pid=45862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872566.491:7892): pid=45862 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872566.495:7893): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872566.495:7894): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872566.537:7895): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872566.537:7896): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872566.567:7897): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872566.567:7898): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872566.708:7899): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872566.708:7900): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872566.770:7901): pid=45892 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872566.771:7902): pid=45892 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626F646A716361796864786A6E7A776F6B74676C696A756D6D63796E71727A6C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872566.771:7903): pid=45892 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872566.774:7904): pid=45892 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872567.249:7905): prog-id=325 op=LOAD
type=BPF msg=audit(1765872567.249:7906): prog-id=326 op=LOAD
type=BPF msg=audit(1765872567.249:7907): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872567.249:7908): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872567.251:7909): prog-id=327 op=LOAD
type=BPF msg=audit(1765872567.251:7910): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872567.255:7911): prog-id=328 op=LOAD
type=BPF msg=audit(1765872567.255:7912): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872567.255:7913): prog-id=329 op=LOAD
type=BPF msg=audit(1765872567.255:7914): prog-id=330 op=LOAD
type=BPF msg=audit(1765872567.255:7915): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872567.255:7916): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872567.256:7917): prog-id=331 op=LOAD
type=BPF msg=audit(1765872567.256:7918): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872567.256:7919): prog-id=332 op=LOAD
type=BPF msg=audit(1765872567.256:7920): prog-id=333 op=LOAD
type=BPF msg=audit(1765872567.256:7921): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872567.256:7922): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872567.257:7923): prog-id=334 op=LOAD
type=BPF msg=audit(1765872567.257:7924): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872567.472:7925): prog-id=335 op=LOAD
type=BPF msg=audit(1765872567.472:7926): prog-id=336 op=LOAD
type=BPF msg=audit(1765872567.472:7927): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872567.473:7928): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872567.475:7929): prog-id=337 op=LOAD
type=BPF msg=audit(1765872567.475:7930): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872567.478:7931): prog-id=338 op=LOAD
type=BPF msg=audit(1765872567.478:7932): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872567.478:7933): prog-id=339 op=LOAD
type=BPF msg=audit(1765872567.478:7934): prog-id=340 op=LOAD
type=BPF msg=audit(1765872567.478:7935): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872567.478:7936): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872567.479:7937): prog-id=341 op=LOAD
type=BPF msg=audit(1765872567.479:7938): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872567.479:7939): prog-id=342 op=LOAD
type=BPF msg=audit(1765872567.479:7940): prog-id=343 op=LOAD
type=BPF msg=audit(1765872567.479:7941): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872567.479:7942): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872567.480:7943): prog-id=344 op=LOAD
type=BPF msg=audit(1765872567.480:7944): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765872567.513:7945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872567.513:7946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872567.541:7947): pid=45892 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872567.541:7948): pid=45892 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872567.546:7949): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872567.546:7950): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872567.815:7951): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872567.815:7952): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872567.879:7953): pid=45984 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872567.880:7954): pid=45984 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7864766D686B6F6D6A6F7068647A6561797175666C727064787A6E626A7777203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872567.880:7955): pid=45984 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872567.885:7956): pid=45984 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872568.085:7957): pid=45984 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872568.085:7958): pid=45984 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872568.089:7959): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872568.089:7960): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872568.306:7961): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872568.306:7962): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872568.364:7963): pid=46000 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872568.364:7964): pid=46000 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F77656B7876676B6C6E64666274736E65646C776A64636D626C737972757873203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872568.365:7965): pid=46000 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872568.368:7966): pid=46000 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872568.690:7967): pid=46000 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872568.691:7968): pid=46000 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872568.694:7969): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872568.695:7970): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872569.166:7971): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872569.166:7972): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872569.227:7973): pid=46042 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872569.228:7974): pid=46042 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C736473686B72766E70746F667379616F6B66617863706D74737679756B6367203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872569.228:7975): pid=46042 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872569.232:7976): pid=46042 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872569.810:7977): prog-id=345 op=LOAD
type=SYSCALL msg=audit(1765872569.810:7977): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffeff109b20 a2=90 a3=9500000000 items=0 ppid=46093 pid=46094 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872569.810:7977): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373330333234353339383563626239393536326139303635613465653433
type=BPF msg=audit(1765872569.869:7978): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872570.476:7979): prog-id=346 op=LOAD
type=SYSCALL msg=audit(1765872570.476:7979): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcf6d360c0 a2=90 a3=9500000000 items=0 ppid=46186 pid=46187 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872570.476:7979): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333764353761646230323766643536303539356262386637393434326532
type=SERVICE_START msg=audit(1765872570.546:7980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872570.772:7981): pid=46042 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872570.772:7982): pid=46042 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872570.776:7983): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872570.776:7984): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765872570.842:7985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765872570.959:7986): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872570.959:7987): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872571.022:7988): pid=46267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872571.022:7989): pid=46267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E687477767A747A6A706771756A69647571776A6979726E726B756E67756D78203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872571.023:7990): pid=46267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872571.027:7991): pid=46267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872571.203:7992): pid=46267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872571.203:7993): pid=46267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872571.207:7994): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872571.208:7995): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872571.249:7996): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872571.249:7997): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872571.313:7998): pid=46283 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872571.313:7999): pid=46283 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A796B7A626D676E70626E736A666466747A736C6B63636173796274656D7272203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872571.314:8000): pid=46283 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872571.316:8001): pid=46283 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872571.472:8002): pid=46283 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872571.472:8003): pid=46283 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872571.475:8004): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872571.475:8005): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872571.517:8006): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872571.517:8007): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872571.545:8008): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872571.545:8009): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872571.602:8010): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872571.602:8011): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872571.632:8012): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872571.632:8013): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872571.818:8014): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872571.818:8015): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872571.852:8016): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872571.852:8017): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872571.894:8018): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872571.894:8019): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872571.942:8020): pid=46344 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872571.943:8021): pid=46344 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72776F7275656A7271736D697372636F686D736D736278737A727463666D6270203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872571.943:8022): pid=46344 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872571.946:8023): pid=46344 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872572.103:8024): pid=46344 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872572.103:8025): pid=46344 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872572.106:8026): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872572.106:8027): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872572.148:8028): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872572.148:8029): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872572.206:8030): pid=46360 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872572.206:8031): pid=46360 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766E7774626C777773686966666C686267636E716562636A6F6D767A72726F70203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872572.207:8032): pid=46360 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872572.209:8033): pid=46360 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872572.702:8034): prog-id=347 op=LOAD
type=BPF msg=audit(1765872572.702:8035): prog-id=348 op=LOAD
type=BPF msg=audit(1765872572.702:8036): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872572.702:8037): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872572.704:8038): prog-id=349 op=LOAD
type=BPF msg=audit(1765872572.704:8039): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872572.708:8040): prog-id=350 op=LOAD
type=BPF msg=audit(1765872572.708:8041): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872572.708:8042): prog-id=351 op=LOAD
type=BPF msg=audit(1765872572.708:8043): prog-id=352 op=LOAD
type=BPF msg=audit(1765872572.708:8044): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872572.708:8045): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872572.709:8046): prog-id=353 op=LOAD
type=BPF msg=audit(1765872572.709:8047): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872572.709:8048): prog-id=354 op=LOAD
type=BPF msg=audit(1765872572.709:8049): prog-id=355 op=LOAD
type=BPF msg=audit(1765872572.709:8050): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872572.709:8051): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872572.709:8052): prog-id=356 op=LOAD
type=BPF msg=audit(1765872572.709:8053): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765872572.740:8054): pid=46360 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872572.741:8055): pid=46360 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872572.745:8056): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872572.745:8057): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872573.000:8058): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872573.000:8059): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872573.060:8060): pid=46411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872573.060:8061): pid=46411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6263626872637A6B786C6267796D7568766D7766747864717376716E62747263203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872573.061:8062): pid=46411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872573.064:8063): pid=46411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872573.558:8064): prog-id=357 op=LOAD
type=BPF msg=audit(1765872573.558:8065): prog-id=358 op=LOAD
type=BPF msg=audit(1765872573.558:8066): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872573.558:8067): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872573.560:8068): prog-id=359 op=LOAD
type=BPF msg=audit(1765872573.560:8069): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872573.564:8070): prog-id=360 op=LOAD
type=BPF msg=audit(1765872573.564:8071): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872573.564:8072): prog-id=361 op=LOAD
type=BPF msg=audit(1765872573.564:8073): prog-id=362 op=LOAD
type=BPF msg=audit(1765872573.564:8074): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872573.564:8075): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872573.565:8076): prog-id=363 op=LOAD
type=BPF msg=audit(1765872573.565:8077): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872573.565:8078): prog-id=364 op=LOAD
type=BPF msg=audit(1765872573.565:8079): prog-id=365 op=LOAD
type=BPF msg=audit(1765872573.565:8080): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872573.565:8081): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872573.566:8082): prog-id=366 op=LOAD
type=BPF msg=audit(1765872573.566:8083): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765872573.650:8084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_metrics_qdr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872573.679:8085): pid=46411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872573.680:8086): pid=46411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872573.684:8087): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872573.684:8088): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872573.727:8089): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872573.727:8090): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872573.758:8091): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872573.758:8092): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872574.095:8093): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872574.095:8094): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872574.157:8095): pid=46492 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872574.157:8096): pid=46492 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7272746F77646B7465626A6277696D6E677068797477636F7670716B66796273203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872574.157:8097): pid=46492 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872574.161:8098): pid=46492 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872574.332:8099): pid=46492 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872574.333:8100): pid=46492 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872574.336:8101): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872574.337:8102): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872574.652:8103): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872574.652:8104): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872574.682:8105): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872574.682:8106): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872574.724:8107): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872574.724:8108): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872574.758:8109): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872574.758:8110): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872574.800:8111): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872574.800:8112): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872574.858:8113): pid=46540 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872574.858:8114): pid=46540 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6E747579726A7863696D746D7965767462626365776F767463636961757065203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872574.858:8115): pid=46540 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872574.861:8116): pid=46540 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872575.023:8117): pid=46540 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872575.023:8118): pid=46540 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872575.026:8119): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872575.026:8120): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872575.070:8121): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872575.070:8122): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872575.106:8123): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872575.106:8124): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872575.148:8125): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872575.148:8126): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872575.178:8127): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872575.178:8128): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872575.220:8129): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872575.220:8130): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872575.279:8131): pid=46583 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872575.279:8132): pid=46583 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677066697A696C77747462736D6D727772657A7A66787270796169677678736E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872575.279:8133): pid=46583 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872575.281:8134): pid=46583 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872575.456:8135): pid=46583 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872575.456:8136): pid=46583 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872575.460:8137): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872575.460:8138): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872575.502:8139): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872575.502:8140): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872575.528:8141): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872575.528:8142): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872575.672:8143): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872575.672:8144): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872575.733:8145): pid=46613 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872575.733:8146): pid=46613 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7764786E7671637972696E6F6F63637A77716B76736874646A79636D6F686271203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872575.734:8147): pid=46613 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872575.736:8148): pid=46613 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872575.925:8149): pid=46613 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872575.925:8150): pid=46613 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872575.928:8151): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872575.928:8152): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872576.199:8153): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872576.199:8154): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872576.268:8155): pid=46629 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872576.268:8156): pid=46629 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6370796E626F71676D7662687679656A7577737075667061766D66646C6C6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872576.269:8157): pid=46629 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872576.409:8158): pid=46629 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872576.592:8159): pid=46629 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872576.593:8160): pid=46629 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872576.597:8161): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872576.597:8162): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872576.704:8163): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872576.704:8164): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872576.766:8165): pid=46645 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872576.766:8166): pid=46645 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6272617377796E6F62636F766A6A62676C70646A6A617261746872676C706C76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872576.767:8167): pid=46645 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872576.769:8168): pid=46645 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872576.947:8169): pid=46645 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872576.948:8170): pid=46645 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872576.952:8171): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872576.952:8172): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765872601.519:8173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872601.855:8174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872632.519:8175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872632.802:8176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872663.517:8177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872663.774:8178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872694.518:8179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872694.851:8180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872725.523:8181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872725.799:8182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872756.519:8183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872756.811:8184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872787.518:8185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872787.834:8186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872818.519:8187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872818.842:8188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872849.517:8189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872849.808:8190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872880.521:8191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872880.803:8192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765872911.519:8193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872911.781:8194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765872924.531:8195): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872924.531:8196): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872924.560:8197): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872924.560:8198): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872924.602:8199): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872924.602:8200): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872924.636:8201): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872924.636:8202): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872924.678:8203): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872924.678:8204): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872924.737:8205): pid=47018 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872924.738:8206): pid=47018 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F73647163797A74727563796B7875726A76656C6F65666F736E6F7170667A72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872924.739:8207): pid=47018 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872924.742:8208): pid=47018 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872924.911:8209): pid=47018 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872924.911:8210): pid=47018 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872924.915:8211): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872924.915:8212): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872924.957:8213): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872924.957:8214): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872924.989:8215): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872924.989:8216): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872925.031:8217): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872925.031:8218): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872925.062:8219): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872925.062:8220): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872925.104:8221): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872925.104:8222): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872925.152:8223): pid=47063 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872925.152:8224): pid=47063 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7765756C75686974626F6C77706E69697874616E686271767265766A76647262203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872925.153:8225): pid=47063 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872925.155:8226): pid=47063 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872925.335:8227): pid=47063 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872925.335:8228): pid=47063 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872925.340:8229): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872925.340:8230): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872925.381:8231): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872925.381:8232): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872925.413:8233): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872925.413:8234): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872925.947:8235): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872925.947:8236): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872925.976:8237): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872925.976:8238): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872926.018:8239): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872926.018:8240): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872926.049:8241): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872926.049:8242): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872926.094:8243): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872926.094:8244): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872926.152:8245): pid=47125 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872926.152:8246): pid=47125 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6967737A637865616A6F6C687074776D6C6F68736D6377677A76756A726D7875203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872926.152:8247): pid=47125 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872926.155:8248): pid=47125 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872926.305:8249): pid=47125 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872926.305:8250): pid=47125 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872926.309:8251): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872926.309:8252): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872926.351:8253): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872926.351:8254): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872926.394:8255): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872926.394:8256): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872926.436:8257): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872926.436:8258): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872926.469:8259): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872926.469:8260): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872926.511:8261): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872926.511:8262): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872926.573:8263): pid=47168 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872926.574:8264): pid=47168 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626C627876746E727A6F6D747862616F7A63686979687279786264696B746F65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872926.574:8265): pid=47168 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872926.576:8266): pid=47168 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872926.742:8267): pid=47168 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872926.743:8268): pid=47168 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872926.746:8269): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872926.747:8270): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872926.779:8271): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872926.779:8272): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872926.811:8273): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872926.812:8274): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872927.029:8275): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872927.030:8276): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872927.105:8277): pid=47198 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872927.105:8278): pid=47198 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656D7169667165737A64727066726776767A6D64647866707068716378756B65203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872927.106:8279): pid=47198 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872927.108:8280): pid=47198 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872927.297:8281): pid=47198 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872927.298:8282): pid=47198 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872927.303:8283): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872927.303:8284): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872927.391:8285): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872927.391:8286): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872927.452:8287): pid=47217 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872927.452:8288): pid=47217 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63757368727069766F6D656F646D666B686E6E63767076666A78716C77746368203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872927.453:8289): pid=47217 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872927.455:8290): pid=47217 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872927.621:8291): pid=47217 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872927.622:8292): pid=47217 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872927.626:8293): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872927.626:8294): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872927.871:8295): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872927.871:8296): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872927.899:8297): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872927.900:8298): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872927.941:8299): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872927.941:8300): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872927.974:8301): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872927.974:8302): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872928.016:8303): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872928.016:8304): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872928.075:8305): pid=47267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872928.076:8306): pid=47267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7979776D706B6A73736E636D7A6D6B6A68746C62737565716675716B6173666D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872928.076:8307): pid=47267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872928.079:8308): pid=47267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872928.252:8309): pid=47267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872928.252:8310): pid=47267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872928.256:8311): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872928.256:8312): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872928.297:8313): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872928.298:8314): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872928.343:8315): pid=47285 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872928.343:8316): pid=47285 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F766963686A6376787A796576746E767A656E68776871627668776573757364203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872928.343:8317): pid=47285 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872928.344:8318): pid=47285 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872928.477:8319): pid=47285 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872928.477:8320): pid=47285 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872928.480:8321): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872928.480:8322): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872928.522:8323): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872928.522:8324): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872928.550:8325): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872928.550:8326): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872928.644:8327): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872928.644:8328): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872928.670:8329): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872928.670:8330): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872928.712:8331): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872928.712:8332): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872928.748:8333): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872928.748:8334): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872928.790:8335): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872928.790:8336): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872928.827:8337): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872928.827:8338): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872928.869:8339): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872928.869:8340): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872928.907:8341): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872928.907:8342): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872928.948:8343): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872928.948:8344): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872928.975:8345): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872928.975:8346): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872929.021:8347): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872929.021:8348): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872929.077:8349): pid=47389 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872929.078:8350): pid=47389 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72646E616B6265776365736C667062617176636F6F6B6B6D6868677969666C62203B20414E5349424C455F4153594E435F4449523D2F746D702F2E616E7369626C655F6173796E63202F7573722F62696E2F707974686F6E33202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353837323932382E363733333837352D3132303430352D39383732363835373832393530352F6173796E635F777261707065722E7079203130353933393231343536312033363030202F686F6D652F747269706C656F2D61646D696E2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353837323932382E363733333837352D3132303430352D39383732363835373832393530352F416E736962616C6C5A5F636F6D6D616E642E7079205F exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872929.078:8351): pid=47389 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872929.081:8352): pid=47389 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872929.242:8353): pid=47389 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872929.242:8354): pid=47389 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872929.245:8355): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872929.245:8356): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872929.337:8357): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872929.337:8358): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872929.396:8359): pid=47410 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872929.397:8360): pid=47410 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616C7263616E767A7268617A656762686B767265716C67766170756278756973203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872929.397:8361): pid=47410 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872929.400:8362): pid=47410 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872929.570:8363): pid=47410 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872929.571:8364): pid=47410 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872929.575:8365): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872929.575:8366): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872939.646:8367): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872939.646:8368): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872939.709:8369): pid=47544 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872939.709:8370): pid=47544 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786A726165757A656679686E68746D677672667A69796A78786F74786662647A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872939.710:8371): pid=47544 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872939.713:8372): pid=47544 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872939.884:8373): pid=47544 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872939.884:8374): pid=47544 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872939.888:8375): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872939.888:8376): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872940.287:8377): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872940.287:8378): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872940.351:8379): pid=47560 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872940.352:8380): pid=47560 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63696F746C766470707463657864766C71706779706D776E786279656B616A62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872940.352:8381): pid=47560 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872940.354:8382): pid=47560 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872940.556:8383): pid=47560 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872940.557:8384): pid=47560 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872940.562:8385): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872940.562:8386): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872940.639:8387): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872940.639:8388): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872940.691:8389): pid=47576 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872940.691:8390): pid=47576 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756E727776636965667264626567676975726A6167616D686D6B626F6B756F69203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872940.692:8391): pid=47576 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872940.695:8392): pid=47576 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872940.863:8393): pid=47576 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872940.863:8394): pid=47576 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872940.869:8395): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872940.870:8396): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872941.032:8397): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872941.032:8398): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872941.062:8399): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872941.062:8400): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872941.103:8401): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872941.103:8402): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872941.139:8403): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872941.140:8404): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872941.181:8405): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872941.181:8406): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872941.242:8407): pid=47626 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872941.242:8408): pid=47626 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7263716C7A7A6C65676A777278756D776B7462676B62727477676961627A7072203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872941.243:8409): pid=47626 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872941.246:8410): pid=47626 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872941.435:8411): pid=47626 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872941.435:8412): pid=47626 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872941.439:8413): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872941.440:8414): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872941.481:8415): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872941.481:8416): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872941.549:8417): pid=47644 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872941.549:8418): pid=47644 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6C777A756170626576727771656B716A64646E6C71756E6C73726C7A7A6D64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872941.550:8419): pid=47644 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872941.552:8420): pid=47644 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872941.726:8421): pid=47644 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872941.727:8422): pid=47644 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872941.729:8423): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872941.729:8424): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872941.771:8425): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872941.771:8426): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872941.795:8427): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872941.795:8428): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872941.901:8429): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872941.901:8430): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872941.960:8431): pid=47674 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872941.960:8432): pid=47674 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79797976627468656D70747565717472616C6D7163667564766C7464727A7969203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872941.961:8433): pid=47674 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765872941.982:8434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765872941.984:8435): pid=47674 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872942.158:8436): pid=47674 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872942.158:8437): pid=47674 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872942.162:8438): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872942.162:8439): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765872942.293:8440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765872942.311:8441): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872942.311:8442): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872942.371:8443): pid=47717 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872942.372:8444): pid=47717 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796176636175676F726B6875656C74636F6F6863776B647A6B6765747A697471203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872942.373:8445): pid=47717 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872942.376:8446): pid=47717 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872942.877:8447): pid=47717 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872942.878:8448): pid=47717 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872942.882:8449): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872942.882:8450): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872943.092:8451): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872943.092:8452): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872943.154:8453): pid=47804 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872943.154:8454): pid=47804 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7761617977646F6A6D6C7468657072706D6C6E7178746C636C64726672617767203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872943.155:8455): pid=47804 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872943.158:8456): pid=47804 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872943.358:8457): pid=47804 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872943.358:8458): pid=47804 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872943.362:8459): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872943.362:8460): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872943.828:8461): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872943.829:8462): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872943.886:8463): pid=47823 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872943.886:8464): pid=47823 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C786D706374646B72666E62616D7574626D6B6A6E70767768626763686C737A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872943.886:8465): pid=47823 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872943.889:8466): pid=47823 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872944.074:8467): pid=47823 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872944.074:8468): pid=47823 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872944.078:8469): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872944.078:8470): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872944.185:8471): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872944.185:8472): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872944.244:8473): pid=47839 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872944.244:8474): pid=47839 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74636A746D73646E74626A716D6E696167627765756D697762666E736F777374203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872944.245:8475): pid=47839 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872944.247:8476): pid=47839 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872944.454:8477): pid=47839 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872944.455:8478): pid=47839 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872944.459:8479): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872944.459:8480): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872944.731:8481): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872944.731:8482): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872944.788:8483): pid=47855 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872944.788:8484): pid=47855 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706D656C6278737A717A6C6A666C70747774646371727163796B756D73747362203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872944.789:8485): pid=47855 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872944.790:8486): pid=47855 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872944.974:8487): pid=47855 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872944.974:8488): pid=47855 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872944.978:8489): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872944.979:8490): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872945.166:8491): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872945.167:8492): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872945.197:8493): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872945.197:8494): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872945.238:8495): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872945.239:8496): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872945.273:8497): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872945.273:8498): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872945.315:8499): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872945.315:8500): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872945.378:8501): pid=47905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872945.378:8502): pid=47905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7372796F6562736F677367726D696C716A6E65726464647675716B7A6B696C65203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872945.379:8503): pid=47905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872945.381:8504): pid=47905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872945.560:8505): pid=47905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872945.561:8506): pid=47905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872945.565:8507): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872945.565:8508): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872945.607:8509): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872945.607:8510): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872945.650:8511): pid=47923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872945.650:8512): pid=47923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D737A72716F6F76626569746D666E7A7A6A64616177787578766E6570786B61203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872945.651:8513): pid=47923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872945.652:8514): pid=47923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872945.822:8515): pid=47923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872945.822:8516): pid=47923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872945.825:8517): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872945.826:8518): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872945.867:8519): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872945.867:8520): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872945.896:8521): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872945.896:8522): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872945.958:8523): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872945.958:8524): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872945.989:8525): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872945.989:8526): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872946.032:8527): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872946.032:8528): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872946.067:8529): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872946.067:8530): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872946.109:8531): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872946.109:8532): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872946.165:8533): pid=47985 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872946.165:8534): pid=47985 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716C7572656E777573786B7166657A61726A6E656B77666D7072646478616577203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872946.165:8535): pid=47985 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872946.167:8536): pid=47985 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872946.345:8537): pid=47985 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872946.345:8538): pid=47985 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872946.349:8539): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872946.349:8540): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872946.371:8541): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872946.371:8542): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872946.427:8543): pid=48003 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872946.427:8544): pid=48003 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776E7A75747463636F6C6E756F6972657669637464756673797163636D657465203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872946.427:8545): pid=48003 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872946.429:8546): pid=48003 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872946.601:8547): pid=48003 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872946.601:8548): pid=48003 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872946.605:8549): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872946.605:8550): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872946.647:8551): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872946.647:8552): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872946.671:8553): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872946.672:8554): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872946.786:8555): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872946.787:8556): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872946.814:8557): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872946.814:8558): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872946.855:8559): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872946.855:8560): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872946.889:8561): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872946.889:8562): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872946.931:8563): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872946.931:8564): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872946.992:8565): pid=48065 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872946.992:8566): pid=48065 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E666D71626D737766686E7261677A6F7A6E65776264666E7174707879776B67203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872946.993:8567): pid=48065 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872946.995:8568): pid=48065 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872947.236:8569): pid=48065 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872947.236:8570): pid=48065 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872947.239:8571): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872947.239:8572): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872947.282:8573): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872947.283:8574): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872947.325:8575): pid=48083 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872947.326:8576): pid=48083 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636F6D64676C66736477776D637167666E6A6877766F6370676C78656E66786B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872947.326:8577): pid=48083 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872947.328:8578): pid=48083 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872947.503:8579): pid=48083 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872947.503:8580): pid=48083 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872947.507:8581): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872947.507:8582): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872947.549:8583): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872947.549:8584): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872947.580:8585): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872947.580:8586): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872947.686:8587): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872947.686:8588): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872947.716:8589): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872947.716:8590): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872947.758:8591): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872947.758:8592): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872947.793:8593): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872947.793:8594): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872947.836:8595): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872947.836:8596): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872947.897:8597): pid=48145 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872947.897:8598): pid=48145 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67766566716E76657971797A6870716C7173776B6C62786F6478616761716864203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872947.898:8599): pid=48145 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872947.900:8600): pid=48145 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872948.098:8601): pid=48145 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872948.099:8602): pid=48145 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872948.103:8603): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872948.103:8604): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872948.145:8605): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872948.145:8606): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872948.202:8607): pid=48163 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872948.202:8608): pid=48163 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666E72756869796A786C78776A6777746573627A6971666F786C636B7275716E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872948.203:8609): pid=48163 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872948.206:8610): pid=48163 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872948.372:8611): pid=48163 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872948.372:8612): pid=48163 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872948.376:8613): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872948.376:8614): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872948.418:8615): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872948.418:8616): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872948.452:8617): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872948.452:8618): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872948.574:8619): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872948.574:8620): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872948.640:8621): pid=48193 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872948.640:8622): pid=48193 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C676C776176696779686B626B716D696E7673666B77697A6664736664796B78203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872948.642:8623): pid=48193 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872948.644:8624): pid=48193 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872949.163:8625): prog-id=367 op=LOAD
type=BPF msg=audit(1765872949.163:8626): prog-id=368 op=LOAD
type=BPF msg=audit(1765872949.163:8627): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872949.163:8628): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872949.165:8629): prog-id=369 op=LOAD
type=BPF msg=audit(1765872949.165:8630): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872949.169:8631): prog-id=370 op=LOAD
type=BPF msg=audit(1765872949.169:8632): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872949.169:8633): prog-id=371 op=LOAD
type=BPF msg=audit(1765872949.169:8634): prog-id=372 op=LOAD
type=BPF msg=audit(1765872949.169:8635): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872949.169:8636): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872949.170:8637): prog-id=373 op=LOAD
type=BPF msg=audit(1765872949.170:8638): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872949.170:8639): prog-id=374 op=LOAD
type=BPF msg=audit(1765872949.170:8640): prog-id=375 op=LOAD
type=BPF msg=audit(1765872949.170:8641): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872949.170:8642): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872949.170:8643): prog-id=376 op=LOAD
type=BPF msg=audit(1765872949.170:8644): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765872949.236:8645): pid=48193 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872949.236:8646): pid=48193 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872949.240:8647): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872949.241:8648): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872949.350:8649): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872949.350:8650): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872949.382:8651): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872949.382:8652): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872949.424:8653): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872949.424:8654): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872949.462:8655): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872949.462:8656): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872949.504:8657): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872949.504:8658): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872949.572:8659): pid=48279 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872949.572:8660): pid=48279 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79757961646D6F676B627861736A74756F6B6C636B6D71766978716D6C756D70203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872949.573:8661): pid=48279 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872949.577:8662): pid=48279 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872949.765:8663): pid=48279 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872949.766:8664): pid=48279 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872949.770:8665): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872949.770:8666): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872949.812:8667): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872949.812:8668): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872949.878:8669): pid=48297 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872949.878:8670): pid=48297 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796D6F70687772726E637472676973786E7070737879747577797A6878766D63203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872949.879:8671): pid=48297 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872949.882:8672): pid=48297 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872950.054:8673): pid=48297 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872950.054:8674): pid=48297 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872950.058:8675): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872950.058:8676): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872950.100:8677): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872950.100:8678): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872950.131:8679): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872950.131:8680): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872950.267:8681): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872950.267:8682): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872950.296:8683): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872950.296:8684): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872950.337:8685): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872950.337:8686): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872950.373:8687): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872950.373:8688): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872950.414:8689): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872950.414:8690): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872950.477:8691): pid=48359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872950.478:8692): pid=48359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65667A63767261676F7A6B746368746475706A64616D6A6C62796B6265786D68203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872950.479:8693): pid=48359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872950.482:8694): pid=48359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872950.673:8695): pid=48359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872950.673:8696): pid=48359 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872950.676:8697): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872950.676:8698): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872950.719:8699): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872950.719:8700): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872950.780:8701): pid=48377 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872950.780:8702): pid=48377 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646A6E727969626D6A7773787866736E70696B657371627663657273796A676A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872950.781:8703): pid=48377 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872950.783:8704): pid=48377 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872950.959:8705): pid=48377 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872950.960:8706): pid=48377 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872950.964:8707): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872950.964:8708): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872951.006:8709): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872951.006:8710): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872951.038:8711): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872951.038:8712): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872951.149:8713): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872951.149:8714): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872951.210:8715): pid=48407 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872951.211:8716): pid=48407 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746E677179726B697A656561666A61686D6776757A66656C687471796C776368203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872951.211:8717): pid=48407 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872951.214:8718): pid=48407 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872951.715:8719): prog-id=377 op=LOAD
type=BPF msg=audit(1765872951.715:8720): prog-id=378 op=LOAD
type=BPF msg=audit(1765872951.715:8721): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872951.715:8722): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872951.717:8723): prog-id=379 op=LOAD
type=BPF msg=audit(1765872951.717:8724): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872951.721:8725): prog-id=380 op=LOAD
type=BPF msg=audit(1765872951.721:8726): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872951.721:8727): prog-id=381 op=LOAD
type=BPF msg=audit(1765872951.721:8728): prog-id=382 op=LOAD
type=BPF msg=audit(1765872951.721:8729): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872951.721:8730): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872951.722:8731): prog-id=383 op=LOAD
type=BPF msg=audit(1765872951.722:8732): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872951.722:8733): prog-id=384 op=LOAD
type=BPF msg=audit(1765872951.722:8734): prog-id=385 op=LOAD
type=BPF msg=audit(1765872951.722:8735): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872951.722:8736): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872951.723:8737): prog-id=386 op=LOAD
type=BPF msg=audit(1765872951.723:8738): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765872951.791:8739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872951.791:8740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765872951.818:8741): pid=48407 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872951.818:8742): pid=48407 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872951.822:8743): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872951.822:8744): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872952.014:8745): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872952.014:8746): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872952.076:8747): pid=48463 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872952.076:8748): pid=48463 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647A6A71626E74666C746167657863617671756979737468726969796C78657A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872952.077:8749): pid=48463 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872952.080:8750): pid=48463 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872952.330:8751): pid=48463 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872952.330:8752): pid=48463 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872952.334:8753): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872952.334:8754): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872952.583:8755): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872952.584:8756): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872952.635:8757): pid=48479 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872952.635:8758): pid=48479 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68736C6B746B7774716B636D64716F6A6F7379737978646C796F776D67667A6F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872952.636:8759): pid=48479 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872952.638:8760): pid=48479 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872952.982:8761): pid=48479 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872952.982:8762): pid=48479 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872952.985:8763): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872952.985:8764): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872953.403:8765): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872953.404:8766): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872953.459:8767): pid=48518 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872953.459:8768): pid=48518 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696165716F68677A6B7077716A6161616B66766A7871626C706E637576657965203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872953.460:8769): pid=48518 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872953.464:8770): pid=48518 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765872954.050:8771): prog-id=387 op=LOAD
type=SYSCALL msg=audit(1765872954.050:8771): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffeba0b2070 a2=90 a3=9500000000 items=0 ppid=48624 pid=48625 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872954.050:8771): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303765313264313337303362353633613963623964633435663662663161
type=BPF msg=audit(1765872954.095:8772): prog-id=388 op=LOAD
type=SYSCALL msg=audit(1765872954.095:8772): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc96339e30 a2=90 a3=9500000001 items=0 ppid=48629 pid=48630 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872954.095:8772): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363431326663366261323730383261363133363264313735303066373638
type=BPF msg=audit(1765872954.105:8773): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872954.147:8774): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872954.698:8775): prog-id=389 op=LOAD
type=SYSCALL msg=audit(1765872954.698:8775): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffeea7c4f0 a2=90 a3=9500000000 items=0 ppid=48813 pid=48814 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872954.698:8775): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333564363730653934386331636432363765386532343132646234306630
type=BPF msg=audit(1765872954.796:8776): prog-id=390 op=LOAD
type=SYSCALL msg=audit(1765872954.796:8776): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc5c750270 a2=90 a3=9500000000 items=0 ppid=48823 pid=48824 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765872954.796:8776): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F326632396266313366306261323135396432393033373235346535393166
type=BPF msg=audit(1765872956.732:8777): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765872958.642:8778): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765872958.848:8779): pid=48518 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872958.849:8780): pid=48518 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872958.854:8781): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872958.854:8782): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872959.148:8783): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872959.148:8784): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872959.211:8785): pid=49132 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872959.211:8786): pid=49132 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71777271647476646C62746F646D75687169646263767173696F70746C786F72203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872959.212:8787): pid=49132 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872959.216:8788): pid=49132 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872959.373:8789): pid=49132 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872959.373:8790): pid=49132 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872959.376:8791): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872959.376:8792): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872959.611:8793): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872959.612:8794): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872959.643:8795): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872959.643:8796): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872959.685:8797): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872959.685:8798): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872959.722:8799): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872959.722:8800): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872959.763:8801): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872959.763:8802): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872959.822:8803): pid=49180 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872959.822:8804): pid=49180 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77707A7971616D796C78657070716E75707063726A68766C68727779656A766E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872959.823:8805): pid=49180 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872959.826:8806): pid=49180 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872959.998:8807): pid=49180 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872959.998:8808): pid=49180 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872960.002:8809): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872960.002:8810): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872960.043:8811): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872960.043:8812): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872960.074:8813): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872960.074:8814): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872960.117:8815): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872960.117:8816): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872960.145:8817): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872960.145:8818): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872960.186:8819): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872960.186:8820): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872960.236:8821): pid=49223 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872960.236:8822): pid=49223 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676864756276736D78686A726D716169706B6368767662766177627577737467203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872960.237:8823): pid=49223 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872960.239:8824): pid=49223 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872960.377:8825): pid=49223 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872960.378:8826): pid=49223 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872960.381:8827): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872960.381:8828): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872960.422:8829): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872960.422:8830): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765872960.447:8831): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872960.447:8832): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872960.547:8833): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872960.547:8834): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872960.601:8835): pid=49253 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872960.602:8836): pid=49253 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78706B636563706279667A6B616E6A746B70797073736978746F737168737A6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872960.602:8837): pid=49253 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872960.605:8838): pid=49253 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872960.768:8839): pid=49253 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872960.768:8840): pid=49253 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872960.772:8841): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872960.772:8842): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872960.985:8843): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872960.985:8844): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872961.041:8845): pid=49269 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872961.041:8846): pid=49269 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74646F626478737572716169636E6E6A63736B666B6C7A6D6A6D7A666E756579203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872961.042:8847): pid=49269 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872961.044:8848): pid=49269 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872961.214:8849): pid=49269 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872961.214:8850): pid=49269 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872961.217:8851): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872961.217:8852): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765872961.331:8853): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765872961.331:8854): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765872961.393:8855): pid=49285 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765872961.394:8856): pid=49285 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7566676D6863747A757964637967627876656C706D617A697067756D73677779203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765872961.394:8857): pid=49285 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765872961.397:8858): pid=49285 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872961.589:8859): pid=49285 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765872961.590:8860): pid=49285 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765872961.593:8861): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765872961.594:8862): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765872972.519:8863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765872972.808:8864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873003.518:8865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873003.843:8866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765873012.103:8867): pid=49348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=49348 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765873012.212:8868): pid=49347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=49348 suid=74 rport=50806 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765873012.212:8869): pid=49347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=49348 suid=74 rport=50806 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765873012.877:8870): pid=49347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.217 addr=193.46.255.217 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765873014.609:8871): pid=49347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.217 addr=193.46.255.217 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765873017.983:8872): pid=49347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.217 addr=193.46.255.217 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765873021.327:8873): pid=49347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49348 suid=74 rport=50806 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765873021.328:8874): pid=49347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=49348 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765873021.329:8875): pid=49347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=49347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765873021.329:8876): pid=49347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765873021.456:8877): pid=49353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=49353 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765873021.563:8878): pid=49352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=49353 suid=74 rport=33688 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765873021.564:8879): pid=49352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=49353 suid=74 rport=33688 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765873022.224:8880): pid=49352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.217 addr=193.46.255.217 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765873025.593:8881): pid=49352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.217 addr=193.46.255.217 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765873029.318:8882): pid=49352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.217 addr=193.46.255.217 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765873032.660:8883): pid=49352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49353 suid=74 rport=33688 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765873032.660:8884): pid=49352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=49353 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765873032.662:8885): pid=49352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=49352 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765873032.662:8886): pid=49352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765873032.789:8887): pid=49358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=49358 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765873032.897:8888): pid=49357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=49358 suid=74 rport=36880 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765873032.897:8889): pid=49357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=49358 suid=74 rport=36880 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765873033.556:8890): pid=49357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.217 addr=193.46.255.217 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873034.518:8891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873034.818:8892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765873036.925:8893): pid=49357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.217 addr=193.46.255.217 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765873038.662:8894): pid=49357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.217 addr=193.46.255.217 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765873042.006:8895): pid=49357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49358 suid=74 rport=36880 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765873042.006:8896): pid=49357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=49358 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765873042.007:8897): pid=49357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=49357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765873042.008:8898): pid=49357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.217 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873065.524:8899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873065.789:8900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873096.522:8901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873096.815:8902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765873102.823:8903): pid=49450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=49450 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765873102.931:8904): pid=49449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=49450 suid=74 rport=15368 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765873102.931:8905): pid=49449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=49450 suid=74 rport=15368 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765873103.596:8906): pid=49449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.99 addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765873106.952:8907): pid=49449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.99 addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765873110.325:8908): pid=49449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.99 addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765873113.670:8909): pid=49449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49450 suid=74 rport=15368 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765873113.670:8910): pid=49449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=49450 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765873113.672:8911): pid=49449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=49449 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765873113.672:8912): pid=49449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765873113.798:8913): pid=49455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=49455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765873113.905:8914): pid=49454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=49455 suid=74 rport=20218 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765873113.906:8915): pid=49454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=49455 suid=74 rport=20218 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765873114.565:8916): pid=49454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.99 addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765873117.931:8917): pid=49454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.99 addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765873121.302:8918): pid=49454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.99 addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765873123.013:8919): pid=49454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49455 suid=74 rport=20218 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765873123.013:8920): pid=49454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=49455 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765873123.014:8921): pid=49454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=49454 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765873123.015:8922): pid=49454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765873123.131:8923): pid=49460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=49460 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765873123.235:8924): pid=49459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=49460 suid=74 rport=32953 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765873123.235:8925): pid=49459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=49460 suid=74 rport=32953 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765873123.862:8926): pid=49459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.99 addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765873127.238:8927): pid=49459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.99 addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873127.521:8928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873127.837:8929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765873130.597:8930): pid=49459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.99 addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765873133.937:8931): pid=49459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=49460 suid=74 rport=32953 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765873133.937:8932): pid=49459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=49460 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765873133.938:8933): pid=49459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=49459 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765873133.939:8934): pid=49459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873158.518:8935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873158.847:8936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873189.522:8937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873189.851:8938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873220.519:8939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873220.802:8940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873251.518:8941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873251.804:8942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765873257.811:8943): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873257.811:8944): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873257.847:8945): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873257.847:8946): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873257.888:8947): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873257.888:8948): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873257.923:8949): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873257.924:8950): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873257.965:8951): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873257.965:8952): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873258.022:8953): pid=49655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873258.022:8954): pid=49655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A65656D6563746B6779746F777974786A767969627166696672676E70667765203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873258.023:8955): pid=49655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873258.027:8956): pid=49655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873258.198:8957): pid=49655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873258.198:8958): pid=49655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873258.202:8959): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873258.202:8960): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873258.244:8961): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873258.244:8962): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873258.276:8963): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873258.276:8964): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873258.318:8965): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873258.318:8966): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873258.343:8967): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873258.343:8968): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873258.389:8969): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873258.389:8970): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873258.451:8971): pid=49700 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873258.452:8972): pid=49700 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F79766C626E626C67686D6F746765647873666B6A696B6677746662717A6978203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873258.453:8973): pid=49700 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873258.456:8974): pid=49700 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873258.623:8975): pid=49700 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873258.623:8976): pid=49700 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873258.627:8977): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873258.627:8978): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873258.669:8979): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873258.669:8980): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873258.695:8981): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873258.695:8982): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873259.026:8983): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873259.027:8984): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873259.087:8985): pid=49730 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873259.087:8986): pid=49730 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D71636D6B61787073736B6665767661687A6975667A7A737368616479707971203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873259.087:8987): pid=49730 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873259.090:8988): pid=49730 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873259.266:8989): pid=49730 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873259.266:8990): pid=49730 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873259.269:8991): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873259.270:8992): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873259.698:8993): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873259.698:8994): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873259.729:8995): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873259.729:8996): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873259.771:8997): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873259.771:8998): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873259.806:8999): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873259.807:9000): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873259.848:9001): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873259.848:9002): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873259.908:9003): pid=49780 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873259.908:9004): pid=49780 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6671696F7A686179637876756771636A7070726A736865796D796766776A6271203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873259.909:9005): pid=49780 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873259.911:9006): pid=49780 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873260.081:9007): pid=49780 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873260.081:9008): pid=49780 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873260.085:9009): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873260.085:9010): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873260.127:9011): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873260.127:9012): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873260.173:9013): pid=49798 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873260.173:9014): pid=49798 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6671716762716567676175747269677179776B6E6C72666263696E7371657A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873260.173:9015): pid=49798 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873260.175:9016): pid=49798 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873260.363:9017): pid=49798 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873260.364:9018): pid=49798 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873260.367:9019): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873260.367:9020): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873260.409:9021): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873260.409:9022): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873260.438:9023): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873260.438:9024): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873260.520:9025): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873260.520:9026): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873260.549:9027): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873260.549:9028): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873260.591:9029): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873260.591:9030): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873260.624:9031): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873260.624:9032): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873260.666:9033): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873260.666:9034): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873260.714:9035): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873260.714:9036): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873260.758:9037): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873260.758:9038): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873260.802:9039): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873260.802:9040): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873260.844:9041): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873260.844:9042): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873260.874:9043): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873260.874:9044): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873260.920:9045): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873260.920:9046): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873260.981:9047): pid=49902 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873260.981:9048): pid=49902 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873260.982:9049): pid=49902 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873260.984:9050): pid=49902 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873261.173:9051): pid=49902 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873261.173:9052): pid=49902 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873261.177:9053): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873261.177:9054): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873261.271:9055): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873261.272:9056): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873261.332:9057): pid=49923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873261.332:9058): pid=49923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E72746A6E716467786277636F6A6173636F75777A76716676656D73706B7964203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873261.333:9059): pid=49923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873261.336:9060): pid=49923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873261.494:9061): pid=49923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873261.494:9062): pid=49923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873261.499:9063): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873261.499:9064): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873271.566:9065): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873271.567:9066): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873271.634:9067): pid=50058 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873271.634:9068): pid=50058 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796B707167647A736B6664617568786F68636D7778706F6176786C7170786571203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873271.635:9069): pid=50058 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873271.640:9070): pid=50058 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873271.800:9071): pid=50058 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873271.800:9072): pid=50058 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873271.804:9073): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873271.804:9074): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873272.196:9075): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873272.197:9076): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873272.263:9077): pid=50074 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873272.263:9078): pid=50074 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D766171626173706C666A6C76687970776976756B626275696F637976716D6B76203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873272.264:9079): pid=50074 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873272.266:9080): pid=50074 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873272.438:9081): pid=50074 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873272.438:9082): pid=50074 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873272.442:9083): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873272.442:9084): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873272.520:9085): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873272.520:9086): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873272.583:9087): pid=50090 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873272.584:9088): pid=50090 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7069656970646C6F76676C657776736A7777756E77756C6D6B6F7162716C6F74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873272.585:9089): pid=50090 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873272.587:9090): pid=50090 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873272.767:9091): pid=50090 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873272.767:9092): pid=50090 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873272.771:9093): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873272.771:9094): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873273.046:9095): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873273.046:9096): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873273.078:9097): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873273.078:9098): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873273.120:9099): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873273.120:9100): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873273.158:9101): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873273.158:9102): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873273.210:9103): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873273.210:9104): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873273.276:9105): pid=50140 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873273.276:9106): pid=50140 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F686D78647A67726C647366746A6177786E77626878757372796C6479747869203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873273.277:9107): pid=50140 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873273.279:9108): pid=50140 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873273.423:9109): pid=50140 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873273.424:9110): pid=50140 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873273.427:9111): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873273.427:9112): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873273.469:9113): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873273.469:9114): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873273.524:9115): pid=50158 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873273.524:9116): pid=50158 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71786A6A626B666B616B646D69616D6B7A72676D6968686277626E6173666375203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873273.524:9117): pid=50158 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873273.527:9118): pid=50158 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873273.702:9119): pid=50158 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873273.702:9120): pid=50158 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873273.705:9121): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873273.705:9122): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873273.750:9123): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873273.750:9124): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873273.774:9125): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873273.774:9126): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873273.886:9127): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873273.886:9128): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873273.951:9129): pid=50188 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873273.952:9130): pid=50188 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666465727663696B72626E6C7768687577717468766162666F7869757267746D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873273.952:9131): pid=50188 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873273.955:9132): pid=50188 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873274.126:9133): pid=50188 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873274.126:9134): pid=50188 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873274.131:9135): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873274.131:9136): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873274.240:9137): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873274.240:9138): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873274.348:9139): pid=50204 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873274.349:9140): pid=50204 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627861687A63696263666271786F797671646C636573707765726B68666E796B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873274.350:9141): pid=50204 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873274.352:9142): pid=50204 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873274.880:9143): pid=50204 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873274.880:9144): pid=50204 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873274.884:9145): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873274.884:9146): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873275.147:9147): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873275.147:9148): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873275.207:9149): pid=50292 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873275.207:9150): pid=50292 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63667265627A766C6273786177746365696C70666665676964666D69657A7472203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873275.208:9151): pid=50292 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873275.210:9152): pid=50292 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873275.413:9153): pid=50292 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873275.414:9154): pid=50292 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873275.417:9155): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873275.417:9156): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873275.992:9157): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873275.993:9158): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873276.050:9159): pid=50311 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873276.050:9160): pid=50311 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62786C726875696E796A76616E62797771786763787A666D7475737A776F7564203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873276.051:9161): pid=50311 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873276.053:9162): pid=50311 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873276.228:9163): pid=50311 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873276.229:9164): pid=50311 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873276.233:9165): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873276.233:9166): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873276.372:9167): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873276.372:9168): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873276.444:9169): pid=50327 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873276.444:9170): pid=50327 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767471767874746E667461756B78666F686C797766766B68716E61766765656A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873276.445:9171): pid=50327 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873276.447:9172): pid=50327 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873276.634:9173): pid=50327 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873276.635:9174): pid=50327 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873276.639:9175): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873276.639:9176): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873277.046:9177): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873277.047:9178): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873277.110:9179): pid=50343 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873277.110:9180): pid=50343 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626F71636D776665766E7678676F7376677375756F64776F736E71776D6D6F77203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873277.110:9181): pid=50343 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873277.113:9182): pid=50343 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873277.297:9183): pid=50343 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873277.298:9184): pid=50343 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873277.302:9185): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873277.302:9186): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873277.564:9187): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873277.564:9188): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873277.598:9189): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873277.598:9190): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873277.640:9191): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873277.640:9192): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873277.680:9193): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873277.680:9194): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873277.722:9195): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873277.722:9196): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873277.786:9197): pid=50393 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873277.786:9198): pid=50393 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C636B7168776A666E6B6E676D7466686F78696D6473696A6D787A626A6C7273203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873277.786:9199): pid=50393 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873277.789:9200): pid=50393 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873277.963:9201): pid=50393 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873277.963:9202): pid=50393 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873277.967:9203): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873277.967:9204): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873278.009:9205): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873278.009:9206): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873278.059:9207): pid=50411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873278.059:9208): pid=50411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736A7A737261616B627768777174707576746863716E746E7A786E72656A6A78203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873278.060:9209): pid=50411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873278.062:9210): pid=50411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873278.206:9211): pid=50411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873278.206:9212): pid=50411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873278.211:9213): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873278.211:9214): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873278.252:9215): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873278.252:9216): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873278.284:9217): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873278.285:9218): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873278.337:9219): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873278.338:9220): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873278.366:9221): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873278.366:9222): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873278.407:9223): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873278.407:9224): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873278.444:9225): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873278.444:9226): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873278.486:9227): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873278.486:9228): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873278.548:9229): pid=50473 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873278.548:9230): pid=50473 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D746A627174686D77646B696F766E707A68776F6D6D77706D6275676C627A6262203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873278.549:9231): pid=50473 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873278.552:9232): pid=50473 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873278.725:9233): pid=50473 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873278.725:9234): pid=50473 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873278.729:9235): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873278.729:9236): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873278.771:9237): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873278.771:9238): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873278.832:9239): pid=50491 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873278.833:9240): pid=50491 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6676726F6D6A6C727A6561657770627A67786B736D63687776667377687A626F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873278.834:9241): pid=50491 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873278.836:9242): pid=50491 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873279.014:9243): pid=50491 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873279.014:9244): pid=50491 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873279.019:9245): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873279.019:9246): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873279.060:9247): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873279.060:9248): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873279.091:9249): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873279.091:9250): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873279.202:9251): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873279.203:9252): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873279.233:9253): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873279.234:9254): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873279.275:9255): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873279.275:9256): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873279.315:9257): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873279.315:9258): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873279.356:9259): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873279.356:9260): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873279.443:9261): pid=50553 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873279.443:9262): pid=50553 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6577686E71766C65707762787262626B75747675627178756370627573716275203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873279.444:9263): pid=50553 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873279.447:9264): pid=50553 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873279.637:9265): pid=50553 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873279.637:9266): pid=50553 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873279.642:9267): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873279.642:9268): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873279.672:9269): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873279.672:9270): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873279.723:9271): pid=50571 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873279.723:9272): pid=50571 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776C617A636B7161757A6E6C7A68726E796962656275746674726E716363726F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873279.724:9273): pid=50571 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873279.726:9274): pid=50571 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873279.875:9275): pid=50571 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873279.875:9276): pid=50571 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873279.880:9277): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873279.880:9278): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873279.922:9279): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873279.922:9280): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873279.954:9281): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873279.954:9282): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873280.060:9283): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873280.060:9284): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873280.092:9285): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873280.092:9286): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873280.134:9287): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873280.134:9288): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873280.166:9289): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873280.166:9290): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873280.207:9291): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873280.208:9292): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873280.257:9293): pid=50633 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873280.257:9294): pid=50633 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D75726A6471776D74666B646779696F6566617479697876786E636177717A7965203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873280.258:9295): pid=50633 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873280.260:9296): pid=50633 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873280.403:9297): pid=50633 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873280.403:9298): pid=50633 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873280.407:9299): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873280.407:9300): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873280.449:9301): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873280.449:9302): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873280.508:9303): pid=50651 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873280.509:9304): pid=50651 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616F6775706D6F65706B64767263716A70617371796770797075726762626A62203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873280.509:9305): pid=50651 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873280.512:9306): pid=50651 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873280.700:9307): pid=50651 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873280.701:9308): pid=50651 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873280.705:9309): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873280.705:9310): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873280.747:9311): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873280.747:9312): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873280.779:9313): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873280.779:9314): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873280.896:9315): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873280.896:9316): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873280.957:9317): pid=50681 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873280.957:9318): pid=50681 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70696B6F7669686975796673707667686E616573737A7779726461776867616E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873280.958:9319): pid=50681 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873280.960:9320): pid=50681 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873281.474:9321): prog-id=391 op=LOAD
type=BPF msg=audit(1765873281.474:9322): prog-id=392 op=LOAD
type=BPF msg=audit(1765873281.474:9323): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873281.474:9324): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873281.477:9325): prog-id=393 op=LOAD
type=BPF msg=audit(1765873281.477:9326): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873281.481:9327): prog-id=394 op=LOAD
type=BPF msg=audit(1765873281.481:9328): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873281.481:9329): prog-id=395 op=LOAD
type=BPF msg=audit(1765873281.481:9330): prog-id=396 op=LOAD
type=BPF msg=audit(1765873281.481:9331): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873281.481:9332): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873281.482:9333): prog-id=397 op=LOAD
type=BPF msg=audit(1765873281.482:9334): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873281.482:9335): prog-id=398 op=LOAD
type=BPF msg=audit(1765873281.482:9336): prog-id=399 op=LOAD
type=BPF msg=audit(1765873281.482:9337): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873281.482:9338): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873281.483:9339): prog-id=400 op=LOAD
type=BPF msg=audit(1765873281.483:9340): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765873281.547:9341): pid=50681 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873281.547:9342): pid=50681 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873281.551:9343): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873281.551:9344): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873281.639:9345): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873281.640:9346): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873281.672:9347): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873281.673:9348): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873281.714:9349): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873281.714:9350): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873281.750:9351): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873281.750:9352): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873281.792:9353): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873281.792:9354): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873281.855:9355): pid=50767 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873281.855:9356): pid=50767 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6871627866647A7776716A7A66646E776E776E75766B6E6C756161626E766F6F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873281.856:9357): pid=50767 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873281.861:9358): pid=50767 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873281.871:9359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873282.069:9360): pid=50767 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873282.070:9361): pid=50767 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873282.074:9362): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873282.074:9363): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873282.116:9364): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873282.116:9365): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873282.182:9366): pid=50814 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873282.183:9367): pid=50814 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71677861646478716972736C636A67706E727477797A6D707A7277626E627977203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873282.184:9368): pid=50814 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873282.188:9369): pid=50814 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873282.221:9370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873282.395:9371): pid=50814 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873282.395:9372): pid=50814 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873282.400:9373): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873282.400:9374): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873282.442:9375): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873282.442:9376): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873282.481:9377): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873282.481:9378): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873282.603:9379): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873282.603:9380): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873282.632:9381): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873282.632:9382): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873282.674:9383): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873282.674:9384): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873282.705:9385): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873282.705:9386): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873282.749:9387): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873282.749:9388): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873282.812:9389): pid=50877 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873282.812:9390): pid=50877 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687568637879726F7561776472747562637A7373636576626178777262616B6D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873282.813:9391): pid=50877 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873282.816:9392): pid=50877 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873283.009:9393): pid=50877 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873283.009:9394): pid=50877 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873283.014:9395): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873283.014:9396): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873283.055:9397): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873283.055:9398): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873283.106:9399): pid=50895 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873283.106:9400): pid=50895 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6376776D7A647468776377777878776163746371726D617765766D75786374203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873283.107:9401): pid=50895 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873283.108:9402): pid=50895 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873283.265:9403): pid=50895 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873283.265:9404): pid=50895 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873283.270:9405): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873283.270:9406): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873283.311:9407): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873283.311:9408): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873283.342:9409): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873283.342:9410): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873283.471:9411): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873283.471:9412): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873283.534:9413): pid=50925 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873283.534:9414): pid=50925 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72756A737A696E6777656F6E796C6C7A69616D76787864677274637663686B65203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873283.535:9415): pid=50925 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873283.537:9416): pid=50925 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873284.023:9417): prog-id=401 op=LOAD
type=BPF msg=audit(1765873284.023:9418): prog-id=402 op=LOAD
type=BPF msg=audit(1765873284.023:9419): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873284.023:9420): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873284.025:9421): prog-id=403 op=LOAD
type=BPF msg=audit(1765873284.025:9422): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873284.028:9423): prog-id=404 op=LOAD
type=BPF msg=audit(1765873284.029:9424): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873284.029:9425): prog-id=405 op=LOAD
type=BPF msg=audit(1765873284.029:9426): prog-id=406 op=LOAD
type=BPF msg=audit(1765873284.029:9427): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873284.029:9428): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873284.029:9429): prog-id=407 op=LOAD
type=BPF msg=audit(1765873284.029:9430): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873284.029:9431): prog-id=408 op=LOAD
type=BPF msg=audit(1765873284.029:9432): prog-id=409 op=LOAD
type=BPF msg=audit(1765873284.029:9433): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873284.029:9434): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873284.030:9435): prog-id=410 op=LOAD
type=BPF msg=audit(1765873284.030:9436): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873284.109:9437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873284.109:9438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873284.137:9439): pid=50925 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873284.137:9440): pid=50925 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873284.142:9441): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873284.142:9442): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873284.434:9443): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873284.434:9444): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873284.502:9445): pid=50984 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873284.503:9446): pid=50984 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7871756E7A6668756E646F6D707976726463657670627969737269646D6D7768203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873284.504:9447): pid=50984 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873284.508:9448): pid=50984 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873284.703:9449): pid=50984 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873284.703:9450): pid=50984 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873284.708:9451): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873284.708:9452): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873284.989:9453): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873284.989:9454): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873285.051:9455): pid=51000 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873285.052:9456): pid=51000 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73796E7879777A7275797A6E65686E6E64706E64706567646A7368626E746776203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873285.052:9457): pid=51000 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873285.055:9458): pid=51000 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873285.451:9459): pid=51000 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873285.451:9460): pid=51000 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873285.456:9461): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873285.456:9462): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873286.110:9463): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873286.110:9464): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873286.176:9465): pid=51042 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873286.176:9466): pid=51042 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706D7A64677467617071746B776E6B6C7278666563766872687469776173636F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873286.177:9467): pid=51042 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873286.180:9468): pid=51042 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873286.712:9469): prog-id=411 op=LOAD
type=SYSCALL msg=audit(1765873286.712:9469): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffebddbbac0 a2=90 a3=9500000000 items=0 ppid=51265 pid=51266 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873286.712:9469): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663464346334663364373164623736353335306534353463373634643833
type=BPF msg=audit(1765873286.718:9470): prog-id=412 op=LOAD
type=SYSCALL msg=audit(1765873286.718:9470): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffce2f2f750 a2=90 a3=9500000000 items=0 ppid=51267 pid=51268 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873286.718:9470): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383433613633343532356536343838643033653538343934636533646266
type=BPF msg=audit(1765873286.743:9471): prog-id=413 op=LOAD
type=SYSCALL msg=audit(1765873286.743:9471): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffda2b5a550 a2=90 a3=9500000001 items=0 ppid=51272 pid=51273 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873286.743:9471): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F633462356163353930313834373162643238633333313839643864353033
type=BPF msg=audit(1765873286.750:9472): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1765873286.780:9473): pid=51299 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873286.780:9474): pid=51299 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873286.780:9475): pid=51299 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873286.812:9476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765873286.814:9477): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873286.818:9478): prog-id=414 op=LOAD
type=SYSCALL msg=audit(1765873286.818:9478): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd264b6a80 a2=90 a3=9500000000 items=0 ppid=51318 pid=51320 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873286.818:9478): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F386530303538626462376165316162613833303532383762383831313037
type=USER_ACCT msg=audit(1765873286.836:9479): pid=51327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1765873286.836:9480): pid=51327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1765873286.836:9481): pid=51327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765873286.836:9482): pid=51327 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=16 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1765873286.836:9482): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd96b0f580 a2=1 a3=0 items=0 ppid=1 pid=51327 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873286.836:9482): proctitle="(systemd)"
type=USER_START msg=audit(1765873286.838:9483): pid=51327 uid=0 auid=0 ses=16 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1765873286.849:9484): prog-id=415 op=LOAD
type=SYSCALL msg=audit(1765873286.849:9484): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff395102d0 a2=90 a3=0 items=0 ppid=1 pid=51327 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873286.849:9484): proctitle="(systemd)"
type=BPF msg=audit(1765873286.850:9485): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873286.850:9486): prog-id=416 op=LOAD
type=SYSCALL msg=audit(1765873286.850:9486): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff39510370 a2=90 a3=4 items=0 ppid=1 pid=51327 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873286.850:9486): proctitle="(systemd)"
type=BPF msg=audit(1765873286.850:9487): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873286.867:9488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873286.976:9489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765873286.991:9490): pid=51299 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873287.012:9491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1765873287.045:9492): pid=51299 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873287.045:9493): pid=51299 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1765873287.059:9494): prog-id=417 op=LOAD
type=SYSCALL msg=audit(1765873287.059:9494): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffdfb932060 a2=90 a3=9500000001 items=0 ppid=51423 pid=51424 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873287.059:9494): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393035313330643434303737626438653139616339666632383436656633
type=USER_ACCT msg=audit(1765873287.094:9495): pid=51441 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873287.095:9496): pid=51441 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873287.096:9497): pid=51441 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1765873287.098:9498): pid=51441 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1765873287.138:9499): pid=51441 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873287.138:9500): pid=51441 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1765873287.162:9501): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873287.379:9502): prog-id=418 op=LOAD
type=SYSCALL msg=audit(1765873287.379:9502): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff1668e840 a2=90 a3=9500000001 items=0 ppid=51607 pid=51608 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873287.379:9502): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F646532643963636233346434653238663137613262356235663263663737
type=BPF msg=audit(1765873287.452:9503): prog-id=419 op=LOAD
type=SYSCALL msg=audit(1765873287.452:9503): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fffb69c06f0 a2=90 a3=9500000001 items=0 ppid=51616 pid=51617 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873287.452:9503): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383561333836343666303931326233333164373132633539353839666537
type=USER_ACCT msg=audit(1765873287.512:9504): pid=51621 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873287.513:9505): pid=51621 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873287.514:9506): pid=51621 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1765873287.546:9507): pid=51621 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1765873287.626:9508): pid=51621 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873287.626:9509): pid=51621 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1765873288.006:9510): prog-id=420 op=LOAD
type=SYSCALL msg=audit(1765873288.006:9510): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc268ca130 a2=90 a3=9500000001 items=0 ppid=51769 pid=51770 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873288.006:9510): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613163633334366530636434366635653432343962366537626232626135
type=BPF msg=audit(1765873288.022:9511): prog-id=421 op=LOAD
type=SYSCALL msg=audit(1765873288.022:9511): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd993c8250 a2=90 a3=9500000001 items=0 ppid=51773 pid=51774 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873288.022:9511): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F396534393762663033656563653937336339306239353930356538643937
type=USER_ACCT msg=audit(1765873288.058:9512): pid=51783 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873288.058:9513): pid=51783 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873288.059:9514): pid=51783 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873288.079:9515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765873288.103:9516): pid=51781 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873288.104:9517): pid=51781 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873288.105:9518): pid=51781 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1765873288.111:9519): pid=51783 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1765873288.127:9520): pid=51781 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1765873288.192:9521): pid=51783 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873288.192:9522): pid=51783 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1765873288.193:9523): pid=51781 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873288.193:9524): pid=51781 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873288.271:9525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765873288.493:9526): prog-id=422 op=LOAD
type=SYSCALL msg=audit(1765873288.493:9526): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff40dedde0 a2=90 a3=9500000001 items=0 ppid=51933 pid=51934 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873288.493:9526): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333735343762653161363434396337356231656632623366343137353666
type=USER_ACCT msg=audit(1765873288.550:9527): pid=51938 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873288.550:9528): pid=51938 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873288.551:9529): pid=51938 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1765873288.586:9530): pid=51938 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1765873288.673:9531): pid=51938 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873288.673:9532): pid=51938 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1765873289.046:9533): prog-id=423 op=LOAD
type=SYSCALL msg=audit(1765873289.046:9533): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffcff38b370 a2=90 a3=9500000001 items=0 ppid=52034 pid=52035 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873289.046:9533): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653836326239366132343635373034643137653930643938653631313839
type=USER_ACCT msg=audit(1765873289.089:9534): pid=52039 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873289.089:9535): pid=52039 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873289.090:9536): pid=52039 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1765873289.115:9537): pid=52039 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1765873289.179:9538): pid=52039 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873289.179:9539): pid=52039 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1765873289.510:9540): prog-id=424 op=LOAD
type=SYSCALL msg=audit(1765873289.510:9540): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffef0f97fd0 a2=90 a3=9500000001 items=0 ppid=52139 pid=52140 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873289.510:9540): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F326331653164333063633534323039383032613137313964336436373535
type=USER_ACCT msg=audit(1765873289.558:9541): pid=52144 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873289.558:9542): pid=52144 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873289.560:9543): pid=52144 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1765873289.583:9544): pid=52144 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1765873289.645:9545): pid=52144 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873289.646:9546): pid=52144 uid=0 auid=1002 ses=14 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1765873289.741:9547): pid=51042 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873289.742:9548): pid=51042 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873289.748:9549): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873289.748:9550): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873289.931:9551): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873289.931:9552): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873290.004:9553): pid=52203 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873290.004:9554): pid=52203 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776A6A68686275616C7275776F676C637572676F7262736378657A6F736B7476203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873290.006:9555): pid=52203 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873290.011:9556): pid=52203 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873290.167:9557): pid=52203 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873290.167:9558): pid=52203 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873290.172:9559): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873290.172:9560): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873290.215:9561): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873290.215:9562): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873290.270:9563): pid=52219 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873290.270:9564): pid=52219 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666578626A696268786A6F756E6E6F756F637162726D79796961656A716C6A7A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873290.271:9565): pid=52219 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873290.274:9566): pid=52219 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873290.453:9567): pid=52219 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873290.454:9568): pid=52219 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873290.458:9569): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873290.459:9570): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873290.500:9571): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873290.500:9572): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873290.559:9573): pid=52235 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873290.560:9574): pid=52235 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756E6D666468696571756B6E75796A6C716376786673696866666C686A7A7A70203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873290.560:9575): pid=52235 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873290.563:9576): pid=52235 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873290.720:9577): pid=52235 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873290.721:9578): pid=52235 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873290.726:9579): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873290.726:9580): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873290.768:9581): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873290.768:9582): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873290.830:9583): pid=52251 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873290.830:9584): pid=52251 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68706171636C6A7369716178766976686961686D6B76626E706D79646E777676203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873290.830:9585): pid=52251 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873290.832:9586): pid=52251 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873291.014:9587): pid=52251 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873291.015:9588): pid=52251 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873291.020:9589): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873291.020:9590): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873291.051:9591): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873291.051:9592): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873291.121:9593): pid=52267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873291.121:9594): pid=52267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6369706769786B6A68686E6F72667761776A636462646C637477666A75796F72203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873291.122:9595): pid=52267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873291.124:9596): pid=52267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873291.316:9597): pid=52267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873291.316:9598): pid=52267 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873291.320:9599): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873291.320:9600): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873291.362:9601): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873291.362:9602): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873291.414:9603): pid=52283 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873291.414:9604): pid=52283 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6679756E74797A65697A6C6C696C72796F66637A6979746B76756D7672737772203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873291.415:9605): pid=52283 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873291.417:9606): pid=52283 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873291.555:9607): pid=52283 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873291.555:9608): pid=52283 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873291.559:9609): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873291.559:9610): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873291.601:9611): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873291.601:9612): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873291.656:9613): pid=52299 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873291.657:9614): pid=52299 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796D74706C687661736163756E6C786F77786E626866756365706E7668647369203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873291.657:9615): pid=52299 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873291.660:9616): pid=52299 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873291.821:9617): pid=52299 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873291.822:9618): pid=52299 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873291.827:9619): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873291.827:9620): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873291.845:9621): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873291.845:9622): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873291.909:9623): pid=52315 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873291.910:9624): pid=52315 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C726F676A7662737A72776B6868707A757962706B7870636F6A686A616A6771203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873291.911:9625): pid=52315 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873291.913:9626): pid=52315 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873292.147:9627): pid=52315 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873292.147:9628): pid=52315 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873292.151:9629): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873292.151:9630): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873292.193:9631): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873292.193:9632): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873292.257:9633): pid=52331 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873292.257:9634): pid=52331 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A736169756C626F656F757A6A716A7069636D636A7463746474777267766579203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873292.257:9635): pid=52331 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873292.260:9636): pid=52331 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873292.440:9637): pid=52331 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873292.440:9638): pid=52331 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873292.444:9639): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873292.444:9640): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873292.486:9641): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873292.486:9642): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873292.547:9643): pid=52347 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873292.548:9644): pid=52347 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626C6D7A686F6B6D6E6174796E736477707A6E71686172777471727977757664203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873292.548:9645): pid=52347 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873292.550:9646): pid=52347 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873292.725:9647): pid=52347 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873292.725:9648): pid=52347 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873292.729:9649): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873292.729:9650): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873292.766:9651): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873292.766:9652): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873292.824:9653): pid=52363 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873292.824:9654): pid=52363 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696A7A6A6A74726C766D66636C6D78657A6564707A726D6B77736E6271716278203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873292.824:9655): pid=52363 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873292.826:9656): pid=52363 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873293.007:9657): pid=52363 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873293.007:9658): pid=52363 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873293.012:9659): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873293.012:9660): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873293.054:9661): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873293.054:9662): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873293.103:9663): pid=52379 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873293.104:9664): pid=52379 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B636F626A7663616A70697764616F6675756D61787162796A726563686D6F6F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873293.104:9665): pid=52379 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873293.107:9666): pid=52379 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873293.257:9667): pid=52379 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873293.258:9668): pid=52379 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873293.261:9669): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873293.261:9670): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873293.303:9671): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873293.303:9672): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873293.349:9673): pid=52395 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873293.349:9674): pid=52395 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74706B6A78676B6F766E6A71716E687875696F6A686A70726177696E62756D62203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873293.350:9675): pid=52395 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873293.352:9676): pid=52395 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873293.533:9677): pid=52395 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873293.533:9678): pid=52395 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873293.538:9679): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873293.538:9680): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873293.581:9681): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873293.581:9682): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873293.637:9683): pid=52411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873293.637:9684): pid=52411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78776761617A70657A786B616F6D736364616C7569717464756C686664786272203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873293.638:9685): pid=52411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873293.640:9686): pid=52411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873293.805:9687): pid=52411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873293.806:9688): pid=52411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873293.811:9689): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873293.811:9690): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873293.853:9691): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873293.853:9692): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873293.917:9693): pid=52427 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873293.917:9694): pid=52427 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66727968627A67676B646470616D6A73637A72696B686D686473706B73767664203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873293.918:9695): pid=52427 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873293.920:9696): pid=52427 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873294.083:9697): pid=52427 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873294.084:9698): pid=52427 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873294.088:9699): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873294.088:9700): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873294.130:9701): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873294.130:9702): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873294.181:9703): pid=52443 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873294.181:9704): pid=52443 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D657A68757263626D707A637862617779666E677161626D6773796F78717477203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873294.181:9705): pid=52443 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873294.183:9706): pid=52443 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873294.356:9707): pid=52443 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873294.356:9708): pid=52443 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873294.361:9709): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873294.361:9710): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873294.402:9711): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873294.402:9712): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873294.455:9713): pid=52459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873294.456:9714): pid=52459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D786473676579756B666868726C786676776563717A6B6A7962716A7465756B6E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873294.456:9715): pid=52459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873294.458:9716): pid=52459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873294.585:9717): pid=52459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873294.586:9718): pid=52459 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873294.590:9719): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873294.590:9720): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873294.631:9721): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873294.631:9722): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873294.687:9723): pid=52475 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873294.687:9724): pid=52475 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716F7A67706A69746663676D636278797867677666687A756B7275656A716B71203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873294.688:9725): pid=52475 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873294.690:9726): pid=52475 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873294.836:9727): pid=52475 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873294.836:9728): pid=52475 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873294.840:9729): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873294.840:9730): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873294.876:9731): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873294.876:9732): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873294.907:9733): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873294.907:9734): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873294.948:9735): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873294.948:9736): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873294.986:9737): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873294.986:9738): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873295.172:9739): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873295.172:9740): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873295.212:9741): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873295.212:9742): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873295.253:9743): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873295.253:9744): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873295.318:9745): pid=52536 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873295.319:9746): pid=52536 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7073766A6B67746A6A766B6F766D75696A6A636163706C65747A676D687170203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873295.319:9747): pid=52536 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873295.321:9748): pid=52536 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873295.496:9749): pid=52536 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873295.496:9750): pid=52536 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873295.499:9751): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873295.499:9752): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873295.681:9753): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873295.682:9754): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873295.713:9755): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873295.713:9756): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873295.756:9757): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873295.756:9758): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873295.801:9759): pid=52565 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873295.801:9760): pid=52565 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706E64796B6D73656F64686A616E6A727A616B686C737A62776A6F76617A796D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873295.802:9761): pid=52565 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873295.804:9762): pid=52565 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873295.949:9763): pid=52565 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873295.949:9764): pid=52565 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873295.953:9765): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873295.953:9766): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873296.146:9767): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873296.146:9768): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873296.186:9769): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873296.187:9770): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873296.228:9771): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873296.228:9772): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873296.290:9773): pid=52594 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873296.290:9774): pid=52594 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D666778767178637970636A766E616F6B7A627567706E6673726571776E6A6F77203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873296.291:9775): pid=52594 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873296.293:9776): pid=52594 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873296.474:9777): pid=52594 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873296.474:9778): pid=52594 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873296.478:9779): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873296.478:9780): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873296.727:9781): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873296.727:9782): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873297.067:9783): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873297.067:9784): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873297.109:9785): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873297.109:9786): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873297.162:9787): pid=52623 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873297.162:9788): pid=52623 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D776363736E76636F61756769786B6677716775676C6D75786B6D686566796B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873297.163:9789): pid=52623 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873297.165:9790): pid=52623 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873297.311:9791): pid=52623 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873297.311:9792): pid=52623 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873297.315:9793): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873297.315:9794): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873297.524:9795): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873297.524:9796): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873297.561:9797): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873297.561:9798): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873297.603:9799): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873297.603:9800): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873297.662:9801): pid=52652 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873297.663:9802): pid=52652 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73716D64686A6F6565676865716471656B75716D646C786E6D726D72706A636A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873297.663:9803): pid=52652 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873297.666:9804): pid=52652 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873297.845:9805): pid=52652 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873297.845:9806): pid=52652 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873297.849:9807): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873297.849:9808): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873298.052:9809): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873298.052:9810): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873298.083:9811): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873298.084:9812): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873298.126:9813): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873298.126:9814): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873298.188:9815): pid=52681 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873298.188:9816): pid=52681 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6879797071616B6B737879756273776769687A77637667647068697266767178203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873298.188:9817): pid=52681 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873298.192:9818): pid=52681 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873298.360:9819): pid=52681 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873298.360:9820): pid=52681 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873298.364:9821): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873298.364:9822): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873298.575:9823): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873298.575:9824): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873298.611:9825): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873298.611:9826): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873298.653:9827): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873298.653:9828): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873298.712:9829): pid=52710 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873298.712:9830): pid=52710 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66777A776D68616A64646B727776647A716B647661787873657876637563726B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873298.713:9831): pid=52710 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873298.715:9832): pid=52710 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873298.896:9833): pid=52710 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873298.896:9834): pid=52710 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873298.899:9835): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873298.899:9836): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873299.116:9837): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873299.116:9838): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873299.157:9839): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873299.158:9840): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873299.199:9841): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873299.199:9842): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873299.261:9843): pid=52739 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873299.261:9844): pid=52739 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6368746D7367666E6A757A687A73766D6D686D6777787A6A7A6B727568796A64203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873299.262:9845): pid=52739 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873299.264:9846): pid=52739 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873299.443:9847): pid=52739 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873299.443:9848): pid=52739 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873299.447:9849): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873299.447:9850): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873299.658:9851): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873299.658:9852): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873299.696:9853): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873299.696:9854): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873299.737:9855): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873299.737:9856): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873299.770:9857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873299.804:9858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765873299.807:9859): pid=52768 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873299.807:9860): pid=52768 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D657867656E676C71657863736C616B73787769726568677A657A727376626269203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873299.808:9861): pid=52768 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873299.811:9862): pid=52768 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873299.991:9863): pid=52768 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873299.992:9864): pid=52768 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873299.996:9865): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873299.996:9866): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873300.038:9867): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873300.038:9868): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873300.097:9869): pid=52787 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873300.097:9870): pid=52787 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7870746B616A656B6E7A6F6F656274636C78716F7866706C617A6A777175676F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873300.098:9871): pid=52787 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873300.100:9872): pid=52787 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873300.596:9873): prog-id=425 op=LOAD
type=BPF msg=audit(1765873300.596:9874): prog-id=426 op=LOAD
type=BPF msg=audit(1765873300.596:9875): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873300.596:9876): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873300.599:9877): prog-id=427 op=LOAD
type=BPF msg=audit(1765873300.599:9878): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873300.604:9879): prog-id=428 op=LOAD
type=BPF msg=audit(1765873300.604:9880): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873300.604:9881): prog-id=429 op=LOAD
type=BPF msg=audit(1765873300.604:9882): prog-id=430 op=LOAD
type=BPF msg=audit(1765873300.604:9883): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873300.605:9884): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873300.605:9885): prog-id=431 op=LOAD
type=BPF msg=audit(1765873300.605:9886): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873300.606:9887): prog-id=432 op=LOAD
type=BPF msg=audit(1765873300.606:9888): prog-id=433 op=LOAD
type=BPF msg=audit(1765873300.606:9889): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873300.606:9890): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873300.606:9891): prog-id=434 op=LOAD
type=BPF msg=audit(1765873300.606:9892): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765873300.628:9893): pid=52787 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873300.628:9894): pid=52787 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873300.633:9895): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873300.633:9896): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873300.832:9897): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873300.832:9898): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873300.901:9899): pid=52839 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873300.902:9900): pid=52839 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F76767177616D62777766707579737270757363796166617465686F6E676A61203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873300.902:9901): pid=52839 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873300.906:9902): pid=52839 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873301.476:9903): prog-id=435 op=LOAD
type=BPF msg=audit(1765873301.476:9904): prog-id=436 op=LOAD
type=BPF msg=audit(1765873301.476:9905): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873301.476:9906): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873301.478:9907): prog-id=437 op=LOAD
type=BPF msg=audit(1765873301.478:9908): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873301.484:9909): prog-id=438 op=LOAD
type=BPF msg=audit(1765873301.484:9910): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873301.484:9911): prog-id=439 op=LOAD
type=BPF msg=audit(1765873301.484:9912): prog-id=440 op=LOAD
type=BPF msg=audit(1765873301.484:9913): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873301.484:9914): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873301.485:9915): prog-id=441 op=LOAD
type=BPF msg=audit(1765873301.485:9916): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873301.485:9917): prog-id=442 op=LOAD
type=BPF msg=audit(1765873301.485:9918): prog-id=443 op=LOAD
type=BPF msg=audit(1765873301.485:9919): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873301.485:9920): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873301.486:9921): prog-id=444 op=LOAD
type=BPF msg=audit(1765873301.486:9922): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873301.598:9923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_collectd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873301.628:9924): pid=52839 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873301.628:9925): pid=52839 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873301.633:9926): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873301.633:9927): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873301.827:9928): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873301.827:9929): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873301.892:9930): pid=52907 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873301.892:9931): pid=52907 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7770656462707165707662766F6E636F6C6C6E737371646D76716E6F796D7572203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873301.893:9932): pid=52907 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873301.896:9933): pid=52907 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873302.512:9934): prog-id=445 op=LOAD
type=BPF msg=audit(1765873302.512:9935): prog-id=446 op=LOAD
type=BPF msg=audit(1765873302.512:9936): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873302.512:9937): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873302.514:9938): prog-id=447 op=LOAD
type=BPF msg=audit(1765873302.514:9939): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873302.520:9940): prog-id=448 op=LOAD
type=BPF msg=audit(1765873302.520:9941): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873302.520:9942): prog-id=449 op=LOAD
type=BPF msg=audit(1765873302.520:9943): prog-id=450 op=LOAD
type=BPF msg=audit(1765873302.520:9944): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873302.520:9945): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873302.521:9946): prog-id=451 op=LOAD
type=BPF msg=audit(1765873302.521:9947): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873302.521:9948): prog-id=452 op=LOAD
type=BPF msg=audit(1765873302.521:9949): prog-id=453 op=LOAD
type=BPF msg=audit(1765873302.521:9950): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873302.521:9951): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873302.521:9952): prog-id=454 op=LOAD
type=BPF msg=audit(1765873302.521:9953): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873302.610:9954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873302.638:9955): pid=52907 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873302.639:9956): pid=52907 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873302.643:9957): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873302.643:9958): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873302.847:9959): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873302.847:9960): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873302.911:9961): pid=52973 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873302.912:9962): pid=52973 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C626166776D766E64646D776D657469647A657870716871706B666F766C7376203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873302.912:9963): pid=52973 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873302.916:9964): pid=52973 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873303.467:9965): prog-id=455 op=LOAD
type=BPF msg=audit(1765873303.467:9966): prog-id=456 op=LOAD
type=BPF msg=audit(1765873303.467:9967): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873303.467:9968): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873303.469:9969): prog-id=457 op=LOAD
type=BPF msg=audit(1765873303.469:9970): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873303.475:9971): prog-id=458 op=LOAD
type=BPF msg=audit(1765873303.475:9972): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873303.475:9973): prog-id=459 op=LOAD
type=BPF msg=audit(1765873303.475:9974): prog-id=460 op=LOAD
type=BPF msg=audit(1765873303.475:9975): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873303.475:9976): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873303.476:9977): prog-id=461 op=LOAD
type=BPF msg=audit(1765873303.476:9978): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873303.476:9979): prog-id=462 op=LOAD
type=BPF msg=audit(1765873303.476:9980): prog-id=463 op=LOAD
type=BPF msg=audit(1765873303.476:9981): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873303.476:9982): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873303.476:9983): prog-id=464 op=LOAD
type=BPF msg=audit(1765873303.476:9984): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873303.566:9985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtlogd_wrapper comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873303.598:9986): pid=52973 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873303.598:9987): pid=52973 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873303.603:9988): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873303.603:9989): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873303.933:9990): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873303.933:9991): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873303.997:9992): pid=53040 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873303.998:9993): pid=53040 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D627575677578637378776F746C75676875716A76716C64796F6F687273777879203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873303.998:9994): pid=53040 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873304.002:9995): pid=53040 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873304.530:9996): prog-id=465 op=LOAD
type=BPF msg=audit(1765873304.530:9997): prog-id=466 op=LOAD
type=BPF msg=audit(1765873304.530:9998): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873304.530:9999): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873304.532:10000): prog-id=467 op=LOAD
type=BPF msg=audit(1765873304.532:10001): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873304.538:10002): prog-id=468 op=LOAD
type=BPF msg=audit(1765873304.538:10003): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873304.538:10004): prog-id=469 op=LOAD
type=BPF msg=audit(1765873304.538:10005): prog-id=470 op=LOAD
type=BPF msg=audit(1765873304.538:10006): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873304.538:10007): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873304.539:10008): prog-id=471 op=LOAD
type=BPF msg=audit(1765873304.539:10009): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873304.539:10010): prog-id=472 op=LOAD
type=BPF msg=audit(1765873304.539:10011): prog-id=473 op=LOAD
type=BPF msg=audit(1765873304.539:10012): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873304.539:10013): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873304.539:10014): prog-id=474 op=LOAD
type=BPF msg=audit(1765873304.539:10015): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873305.005:10016): prog-id=475 op=LOAD
type=BPF msg=audit(1765873305.005:10017): prog-id=476 op=LOAD
type=BPF msg=audit(1765873305.005:10018): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873305.005:10019): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873305.008:10020): prog-id=477 op=LOAD
type=BPF msg=audit(1765873305.008:10021): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873305.013:10022): prog-id=478 op=LOAD
type=BPF msg=audit(1765873305.013:10023): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873305.013:10024): prog-id=479 op=LOAD
type=BPF msg=audit(1765873305.013:10025): prog-id=480 op=LOAD
type=BPF msg=audit(1765873305.014:10026): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873305.014:10027): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873305.014:10028): prog-id=481 op=LOAD
type=BPF msg=audit(1765873305.014:10029): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873305.014:10030): prog-id=482 op=LOAD
type=BPF msg=audit(1765873305.014:10031): prog-id=483 op=LOAD
type=BPF msg=audit(1765873305.014:10032): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873305.014:10033): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873305.015:10034): prog-id=484 op=LOAD
type=BPF msg=audit(1765873305.015:10035): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873305.022:10036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtnodedevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873305.055:10037): pid=53040 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873305.056:10038): pid=53040 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873305.061:10039): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873305.061:10040): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873305.257:10041): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873305.257:10042): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873305.327:10043): pid=53167 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873305.328:10044): pid=53167 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D61666B6A6675796C7A6A747268787662657262667570667A66686D7171687177203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873305.329:10045): pid=53167 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873305.335:10046): pid=53167 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873306.929:10047): prog-id=485 op=LOAD
type=BPF msg=audit(1765873306.929:10048): prog-id=486 op=LOAD
type=BPF msg=audit(1765873306.929:10049): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873306.929:10050): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873306.931:10051): prog-id=487 op=LOAD
type=BPF msg=audit(1765873306.931:10052): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873306.937:10053): prog-id=488 op=LOAD
type=BPF msg=audit(1765873306.937:10054): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873306.937:10055): prog-id=489 op=LOAD
type=BPF msg=audit(1765873306.937:10056): prog-id=490 op=LOAD
type=BPF msg=audit(1765873306.937:10057): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873306.937:10058): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873306.938:10059): prog-id=491 op=LOAD
type=BPF msg=audit(1765873306.938:10060): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873306.938:10061): prog-id=492 op=LOAD
type=BPF msg=audit(1765873306.938:10062): prog-id=493 op=LOAD
type=BPF msg=audit(1765873306.938:10063): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873306.938:10064): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873306.938:10065): prog-id=494 op=LOAD
type=BPF msg=audit(1765873306.939:10066): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873307.406:10067): prog-id=495 op=LOAD
type=BPF msg=audit(1765873307.406:10068): prog-id=496 op=LOAD
type=BPF msg=audit(1765873307.406:10069): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873307.406:10070): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873307.408:10071): prog-id=497 op=LOAD
type=BPF msg=audit(1765873307.409:10072): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873307.414:10073): prog-id=498 op=LOAD
type=BPF msg=audit(1765873307.414:10074): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873307.414:10075): prog-id=499 op=LOAD
type=BPF msg=audit(1765873307.414:10076): prog-id=500 op=LOAD
type=BPF msg=audit(1765873307.414:10077): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873307.414:10078): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873307.416:10079): prog-id=501 op=LOAD
type=BPF msg=audit(1765873307.416:10080): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873307.416:10081): prog-id=502 op=LOAD
type=BPF msg=audit(1765873307.416:10082): prog-id=503 op=LOAD
type=BPF msg=audit(1765873307.416:10083): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873307.416:10084): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873307.417:10085): prog-id=504 op=LOAD
type=BPF msg=audit(1765873307.417:10086): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873307.429:10087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtproxyd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873307.467:10088): pid=53167 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873307.467:10089): pid=53167 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873307.472:10090): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873307.472:10091): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873307.678:10092): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873307.678:10093): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873307.750:10094): pid=53291 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873307.750:10095): pid=53291 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686862686661707A6870696676687669647A7166656561616C69687072616B70203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873307.751:10096): pid=53291 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873307.756:10097): pid=53291 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873308.294:10098): prog-id=505 op=LOAD
type=BPF msg=audit(1765873308.294:10099): prog-id=506 op=LOAD
type=BPF msg=audit(1765873308.294:10100): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873308.294:10101): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873308.297:10102): prog-id=507 op=LOAD
type=BPF msg=audit(1765873308.297:10103): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873308.302:10104): prog-id=508 op=LOAD
type=BPF msg=audit(1765873308.302:10105): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873308.302:10106): prog-id=509 op=LOAD
type=BPF msg=audit(1765873308.302:10107): prog-id=510 op=LOAD
type=BPF msg=audit(1765873308.302:10108): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873308.302:10109): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873308.303:10110): prog-id=511 op=LOAD
type=BPF msg=audit(1765873308.303:10111): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873308.303:10112): prog-id=512 op=LOAD
type=BPF msg=audit(1765873308.303:10113): prog-id=513 op=LOAD
type=BPF msg=audit(1765873308.303:10114): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873308.303:10115): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873308.304:10116): prog-id=514 op=LOAD
type=BPF msg=audit(1765873308.304:10117): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873308.755:10118): prog-id=515 op=LOAD
type=BPF msg=audit(1765873308.755:10119): prog-id=516 op=LOAD
type=BPF msg=audit(1765873308.755:10120): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873308.755:10121): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873308.758:10122): prog-id=517 op=LOAD
type=BPF msg=audit(1765873308.758:10123): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873308.763:10124): prog-id=518 op=LOAD
type=BPF msg=audit(1765873308.763:10125): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873308.763:10126): prog-id=519 op=LOAD
type=BPF msg=audit(1765873308.763:10127): prog-id=520 op=LOAD
type=BPF msg=audit(1765873308.763:10128): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873308.763:10129): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873308.764:10130): prog-id=521 op=LOAD
type=BPF msg=audit(1765873308.764:10131): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873308.764:10132): prog-id=522 op=LOAD
type=BPF msg=audit(1765873308.764:10133): prog-id=523 op=LOAD
type=BPF msg=audit(1765873308.764:10134): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873308.764:10135): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873308.765:10136): prog-id=524 op=LOAD
type=BPF msg=audit(1765873308.765:10137): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873308.773:10138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873308.802:10139): pid=53291 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873308.803:10140): pid=53291 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873308.807:10141): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873308.808:10142): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873309.037:10143): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873309.037:10144): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873309.103:10145): pid=53417 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873309.103:10146): pid=53417 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D796B6B7072666167637063687662717062616B6E696176736D6C7475796D7874203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873309.104:10147): pid=53417 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873309.109:10148): pid=53417 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873309.663:10149): prog-id=525 op=LOAD
type=BPF msg=audit(1765873309.663:10150): prog-id=526 op=LOAD
type=BPF msg=audit(1765873309.663:10151): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873309.663:10152): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873309.666:10153): prog-id=527 op=LOAD
type=BPF msg=audit(1765873309.666:10154): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873309.672:10155): prog-id=528 op=LOAD
type=BPF msg=audit(1765873309.672:10156): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873309.672:10157): prog-id=529 op=LOAD
type=BPF msg=audit(1765873309.672:10158): prog-id=530 op=LOAD
type=BPF msg=audit(1765873309.672:10159): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873309.672:10160): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873309.673:10161): prog-id=531 op=LOAD
type=BPF msg=audit(1765873309.673:10162): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873309.673:10163): prog-id=532 op=LOAD
type=BPF msg=audit(1765873309.673:10164): prog-id=533 op=LOAD
type=BPF msg=audit(1765873309.673:10165): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873309.673:10166): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873309.674:10167): prog-id=534 op=LOAD
type=BPF msg=audit(1765873309.674:10168): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873310.127:10169): prog-id=535 op=LOAD
type=BPF msg=audit(1765873310.127:10170): prog-id=536 op=LOAD
type=BPF msg=audit(1765873310.127:10171): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873310.127:10172): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873310.130:10173): prog-id=537 op=LOAD
type=BPF msg=audit(1765873310.130:10174): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873310.135:10175): prog-id=538 op=LOAD
type=BPF msg=audit(1765873310.135:10176): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873310.135:10177): prog-id=539 op=LOAD
type=BPF msg=audit(1765873310.135:10178): prog-id=540 op=LOAD
type=BPF msg=audit(1765873310.135:10179): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873310.135:10180): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873310.136:10181): prog-id=541 op=LOAD
type=BPF msg=audit(1765873310.136:10182): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873310.136:10183): prog-id=542 op=LOAD
type=BPF msg=audit(1765873310.136:10184): prog-id=543 op=LOAD
type=BPF msg=audit(1765873310.136:10185): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873310.136:10186): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873310.137:10187): prog-id=544 op=LOAD
type=BPF msg=audit(1765873310.137:10188): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873310.145:10189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtsecretd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873310.176:10190): pid=53417 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873310.176:10191): pid=53417 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873310.182:10192): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873310.182:10193): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873310.497:10194): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873310.497:10195): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873310.564:10196): pid=53543 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873310.564:10197): pid=53543 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79656A627A7473636662786E7370756A6161697963686878746C75637A737569203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873310.565:10198): pid=53543 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873310.569:10199): pid=53543 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873312.192:10200): prog-id=545 op=LOAD
type=BPF msg=audit(1765873312.192:10201): prog-id=546 op=LOAD
type=BPF msg=audit(1765873312.192:10202): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873312.192:10203): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873312.196:10204): prog-id=547 op=LOAD
type=BPF msg=audit(1765873312.196:10205): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873312.202:10206): prog-id=548 op=LOAD
type=BPF msg=audit(1765873312.202:10207): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873312.202:10208): prog-id=549 op=LOAD
type=BPF msg=audit(1765873312.202:10209): prog-id=550 op=LOAD
type=BPF msg=audit(1765873312.202:10210): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873312.202:10211): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873312.203:10212): prog-id=551 op=LOAD
type=BPF msg=audit(1765873312.203:10213): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873312.203:10214): prog-id=552 op=LOAD
type=BPF msg=audit(1765873312.203:10215): prog-id=553 op=LOAD
type=BPF msg=audit(1765873312.203:10216): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873312.203:10217): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873312.204:10218): prog-id=554 op=LOAD
type=BPF msg=audit(1765873312.204:10219): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873312.233:10220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765873312.753:10221): prog-id=555 op=LOAD
type=BPF msg=audit(1765873312.753:10222): prog-id=556 op=LOAD
type=BPF msg=audit(1765873312.753:10223): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873312.753:10224): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873312.756:10225): prog-id=557 op=LOAD
type=BPF msg=audit(1765873312.756:10226): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873312.761:10227): prog-id=558 op=LOAD
type=BPF msg=audit(1765873312.761:10228): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873312.761:10229): prog-id=559 op=LOAD
type=BPF msg=audit(1765873312.762:10230): prog-id=560 op=LOAD
type=BPF msg=audit(1765873312.762:10231): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873312.762:10232): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873312.762:10233): prog-id=561 op=LOAD
type=BPF msg=audit(1765873312.762:10234): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873312.762:10235): prog-id=562 op=LOAD
type=BPF msg=audit(1765873312.762:10236): prog-id=563 op=LOAD
type=BPF msg=audit(1765873312.762:10237): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873312.762:10238): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873312.763:10239): prog-id=564 op=LOAD
type=BPF msg=audit(1765873312.763:10240): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765873312.769:10241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873312.771:10242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtstoraged comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873312.802:10243): pid=53543 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873312.802:10244): pid=53543 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873312.807:10245): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873312.807:10246): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873313.035:10247): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873313.035:10248): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873313.096:10249): pid=53695 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873313.096:10250): pid=53695 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D727062696B67727864706579617073756D6A6C787762646C727770726B796362203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873313.098:10251): pid=53695 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873313.103:10252): pid=53695 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873313.677:10253): prog-id=565 op=LOAD
type=BPF msg=audit(1765873313.677:10254): prog-id=566 op=LOAD
type=BPF msg=audit(1765873313.677:10255): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873313.677:10256): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873313.680:10257): prog-id=567 op=LOAD
type=BPF msg=audit(1765873313.680:10258): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873313.686:10259): prog-id=568 op=LOAD
type=BPF msg=audit(1765873313.686:10260): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873313.687:10261): prog-id=569 op=LOAD
type=BPF msg=audit(1765873313.687:10262): prog-id=570 op=LOAD
type=BPF msg=audit(1765873313.687:10263): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873313.687:10264): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873313.687:10265): prog-id=571 op=LOAD
type=BPF msg=audit(1765873313.687:10266): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873313.687:10267): prog-id=572 op=LOAD
type=BPF msg=audit(1765873313.687:10268): prog-id=573 op=LOAD
type=BPF msg=audit(1765873313.687:10269): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873313.687:10270): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873313.689:10271): prog-id=574 op=LOAD
type=BPF msg=audit(1765873313.689:10272): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873313.838:10273): prog-id=575 op=LOAD
type=SYSCALL msg=audit(1765873313.838:10273): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fff1b255e70 a2=90 a3=9500000001 items=0 ppid=53751 pid=53753 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873313.838:10273): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393035313330643434303737626438653139616339666632383436656633
type=SERVICE_START msg=audit(1765873313.870:10274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765873313.875:10275): pid=53757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765873313.875:10276): pid=53757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765873313.876:10277): pid=53757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765873313.877:10278): pid=53757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873313.902:10279): pid=53695 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873313.902:10280): pid=53695 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873313.909:10281): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873313.909:10282): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873313.939:10283): pid=53757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765873313.939:10284): pid=53757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765873313.953:10285): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873313.953:10286): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1765873313.970:10287): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765873313.980:10288): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873313.980:10289): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873314.113:10290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765873314.174:10291): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873314.174:10292): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873314.248:10293): pid=53815 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873314.248:10294): pid=53815 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F61696A6862646B646C6F7978716D73626C7766777672707168716E777A6E75203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873314.250:10295): pid=53815 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873314.253:10296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873314.253:10297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765873314.270:10298): pid=53815 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873314.382:10299): prog-id=576 op=LOAD
type=SYSCALL msg=audit(1765873314.382:10299): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffcf24b4e70 a2=90 a3=9500000001 items=0 ppid=53830 pid=53831 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873314.382:10299): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393035313330643434303737626438653139616339666632383436656633
type=SERVICE_START msg=audit(1765873314.411:10300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765873314.420:10301): pid=53835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765873314.420:10302): pid=53835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765873314.421:10303): pid=53835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765873314.422:10304): pid=53835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873314.447:10305): pid=53815 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873314.448:10306): pid=53815 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873314.452:10307): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873314.452:10308): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873314.489:10309): pid=53835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765873314.490:10310): pid=53835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765873314.516:10311): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765873314.678:10312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765873314.723:10313): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873314.723:10314): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873314.753:10315): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873314.753:10316): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765873314.790:10317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873314.790:10318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765873314.794:10319): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873314.794:10320): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873314.841:10321): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873314.841:10322): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873314.883:10323): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873314.883:10324): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1765873314.924:10325): prog-id=577 op=LOAD
type=SYSCALL msg=audit(1765873314.924:10325): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc33bbed30 a2=90 a3=9500000001 items=0 ppid=53911 pid=53912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873314.924:10325): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393035313330643434303737626438653139616339666632383436656633
type=USER_ACCT msg=audit(1765873314.945:10326): pid=53923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873314.945:10327): pid=53923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626377756E6975797A74636D7A6E7A766863767777736179676C687661647864203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873314.946:10328): pid=53923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873314.948:10329): pid=53923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873314.951:10330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765873314.957:10331): pid=53927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765873314.957:10332): pid=53927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765873314.957:10333): pid=53927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765873314.959:10334): pid=53927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873315.011:10335): pid=53927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765873315.012:10336): pid=53927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765873315.046:10337): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765873315.116:10338): pid=53923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873315.117:10339): pid=53923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873315.120:10340): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873315.120:10341): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873315.162:10342): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873315.162:10343): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873315.183:10344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1765873315.197:10345): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873315.197:10346): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873315.239:10347): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873315.239:10348): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873315.269:10349): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873315.269:10350): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873315.311:10351): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873315.311:10352): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873315.376:10353): pid=53996 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873315.377:10354): pid=53996 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A6567666674766A796A73666C766D626B7161676A676C71737A66656562766D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873315.377:10355): pid=53996 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873315.379:10356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873315.379:10357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765873315.381:10358): pid=53996 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873315.505:10359): prog-id=578 op=LOAD
type=SYSCALL msg=audit(1765873315.505:10359): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe2e8b5ad0 a2=90 a3=9500000001 items=0 ppid=54014 pid=54015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873315.505:10359): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393035313330643434303737626438653139616339666632383436656633
type=SERVICE_START msg=audit(1765873315.529:10360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765873315.536:10361): pid=54019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765873315.537:10362): pid=54019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765873315.537:10363): pid=54019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765873315.538:10364): pid=54019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873315.593:10365): pid=53996 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873315.594:10366): pid=53996 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873315.597:10367): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873315.597:10368): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873315.611:10369): pid=54019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765873315.612:10370): pid=54019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765873315.639:10371): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873315.639:10372): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1765873315.650:10373): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765873315.665:10374): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873315.665:10375): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873315.791:10376): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873315.792:10377): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873315.792:10378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765873315.835:10379): pid=54072 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873315.835:10380): pid=54072 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7674666574707A687575777661706B7778627763736A6271686E6A7674747A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873315.836:10381): pid=54072 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873315.838:10382): pid=54072 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873316.008:10383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873316.008:10384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873316.008:10385): pid=54072 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873316.009:10386): pid=54072 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873316.029:10387): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873316.029:10388): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1765873316.150:10389): prog-id=579 op=LOAD
type=SYSCALL msg=audit(1765873316.150:10389): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffe76b7f710 a2=90 a3=9500000001 items=0 ppid=54089 pid=54090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873316.150:10389): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393035313330643434303737626438653139616339666632383436656633
type=SERVICE_START msg=audit(1765873316.169:10390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765873316.180:10391): pid=54094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765873316.180:10392): pid=54094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765873316.181:10393): pid=54094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765873316.182:10394): pid=54094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873316.253:10395): pid=54094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765873316.254:10396): pid=54094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765873316.281:10397): prog-id=0 op=UNLOAD
type=USER_LOGIN msg=audit(1765873316.339:10398): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873316.339:10399): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873316.396:10400): pid=54131 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873316.397:10401): pid=54131 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66766D68657571687A736E6A776C6B6274687A6A617874636D6C657873746F6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873316.397:10402): pid=54131 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873316.401:10403): pid=54131 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873316.413:10404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1765873316.540:10405): pid=54131 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873316.541:10406): pid=54131 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873316.544:10407): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873316.545:10408): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873316.646:10409): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873316.646:10410): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873316.705:10411): pid=54151 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873316.706:10412): pid=54151 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D63776161736D756E676E6D7668686A777677666D6E617578616F7A6C77786A6A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873316.706:10413): pid=54151 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873316.708:10414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873316.708:10415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_rsyslog comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765873316.710:10416): pid=54151 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873316.892:10417): pid=54151 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873316.892:10418): pid=54151 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873316.896:10419): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873316.896:10420): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765873317.519:10421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873317.659:10422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873318.522:10423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873318.661:10424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873343.528:10425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873343.785:10426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873348.523:10427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873348.637:10428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873349.518:10429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873349.627:10430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873374.531:10431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873374.853:10432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873379.529:10433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873379.650:10434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873379.653:10435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873379.765:10436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873405.519:10437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873405.837:10438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873410.521:10439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873410.524:10440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873410.673:10441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873410.761:10442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873436.518:10443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873436.778:10444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873441.520:10445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873441.524:10446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873441.690:10447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873441.747:10448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873467.519:10449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873467.823:10450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873472.519:10451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873472.522:10452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873472.640:10453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873472.733:10454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873498.518:10455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873498.838:10456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873503.518:10457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873503.520:10458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873503.665:10459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873503.710:10460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765873527.824:10461): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873527.824:10462): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873527.856:10463): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873527.857:10464): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873527.897:10465): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873527.898:10466): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873527.932:10467): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873527.933:10468): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873527.974:10469): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873527.974:10470): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873528.031:10471): pid=54649 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873528.032:10472): pid=54649 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D77637A6A756667746574637761656C79676C6D716A636A766B6C7969706C7671203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873528.033:10473): pid=54649 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873528.036:10474): pid=54649 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873528.213:10475): pid=54649 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873528.213:10476): pid=54649 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873528.217:10477): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873528.217:10478): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873528.259:10479): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873528.259:10480): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873528.303:10481): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873528.303:10482): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873528.344:10483): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873528.344:10484): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873528.372:10485): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873528.373:10486): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873528.414:10487): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873528.414:10488): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873528.470:10489): pid=54694 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873528.470:10490): pid=54694 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677669746D7473797766717A6E75666E70777864656968767463657376736270203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873528.471:10491): pid=54694 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873528.473:10492): pid=54694 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873528.672:10493): pid=54694 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873528.672:10494): pid=54694 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873528.676:10495): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873528.676:10496): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873528.718:10497): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873528.718:10498): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873528.745:10499): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873528.745:10500): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873529.163:10501): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873529.163:10502): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873529.191:10503): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873529.191:10504): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873529.232:10505): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873529.232:10506): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873529.269:10507): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873529.269:10508): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873529.311:10509): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873529.311:10510): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873529.375:10511): pid=54756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873529.376:10512): pid=54756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B76686E776A7474666C657364796166727A666B6E787667776F79676B776B6D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873529.376:10513): pid=54756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873529.401:10514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765873529.403:10515): pid=54756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873529.581:10516): pid=54756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873529.581:10517): pid=54756 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873529.585:10518): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873529.585:10519): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873529.627:10520): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873529.627:10521): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873529.657:10522): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873529.657:10523): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873529.699:10524): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873529.699:10525): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873529.702:10526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873529.727:10527): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873529.727:10528): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873529.769:10529): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873529.769:10530): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873529.828:10531): pid=54830 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873529.828:10532): pid=54830 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7561686A6E76616E78656378626A666464747569666C67716A6A66686C737A71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873529.829:10533): pid=54830 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873529.832:10534): pid=54830 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873530.012:10535): pid=54830 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873530.012:10536): pid=54830 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873530.016:10537): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873530.016:10538): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873530.058:10539): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873530.058:10540): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873530.088:10541): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873530.088:10542): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873530.199:10543): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873530.199:10544): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873530.227:10545): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873530.227:10546): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873530.269:10547): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873530.269:10548): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873530.303:10549): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873530.303:10550): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873530.348:10551): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873530.348:10552): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873530.401:10553): pid=54892 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873530.401:10554): pid=54892 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B696870667972737361706C766279736465626A617969716F6C747062756578203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873530.402:10555): pid=54892 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873530.404:10556): pid=54892 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873530.563:10557): pid=54892 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873530.563:10558): pid=54892 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873530.566:10559): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873530.567:10560): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873530.609:10561): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873530.609:10562): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873530.639:10563): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873530.639:10564): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873530.681:10565): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873530.681:10566): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873530.708:10567): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873530.709:10568): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873530.749:10569): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873530.749:10570): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873530.800:10571): pid=54935 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873530.801:10572): pid=54935 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62776C7366706D6D626C79746E6A73696B6F70686674786D6D627A79636C7666203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873530.801:10573): pid=54935 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873530.804:10574): pid=54935 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873530.959:10575): pid=54935 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873530.959:10576): pid=54935 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873530.963:10577): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873530.963:10578): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873531.004:10579): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873531.005:10580): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873531.033:10581): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873531.033:10582): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873531.151:10583): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873531.151:10584): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873531.182:10585): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873531.182:10586): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873531.223:10587): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873531.223:10588): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873531.259:10589): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873531.259:10590): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873531.303:10591): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873531.303:10592): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873531.340:10593): pid=54997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873531.341:10594): pid=54997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D687566667A716C6C6B68616E667466676F7471747979617475617A7167726E7A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873531.341:10595): pid=54997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873531.342:10596): pid=54997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873531.509:10597): pid=54997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873531.509:10598): pid=54997 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873531.513:10599): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873531.513:10600): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873531.553:10601): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873531.553:10602): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873531.590:10603): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873531.590:10604): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873531.632:10605): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873531.632:10606): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873531.664:10607): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873531.664:10608): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873531.714:10609): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873531.714:10610): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873531.763:10611): pid=55040 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873531.764:10612): pid=55040 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7A697A7470717168767766646E62796A78626467746C61627572736D646677203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873531.764:10613): pid=55040 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873531.766:10614): pid=55040 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873531.949:10615): pid=55040 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873531.949:10616): pid=55040 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873531.953:10617): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873531.953:10618): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873531.994:10619): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873531.994:10620): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873532.024:10621): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873532.024:10622): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873532.132:10623): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873532.133:10624): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873532.197:10625): pid=55070 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873532.197:10626): pid=55070 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7268757864637862616F7379616A7677756C6F776471796970656F6878726F63203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873532.198:10627): pid=55070 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873532.200:10628): pid=55070 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873532.729:10629): prog-id=580 op=LOAD
type=BPF msg=audit(1765873532.729:10630): prog-id=581 op=LOAD
type=BPF msg=audit(1765873532.729:10631): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873532.729:10632): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873532.732:10633): prog-id=582 op=LOAD
type=BPF msg=audit(1765873532.732:10634): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873532.738:10635): prog-id=583 op=LOAD
type=BPF msg=audit(1765873532.738:10636): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873532.738:10637): prog-id=584 op=LOAD
type=BPF msg=audit(1765873532.738:10638): prog-id=585 op=LOAD
type=BPF msg=audit(1765873532.738:10639): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873532.738:10640): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873532.739:10641): prog-id=586 op=LOAD
type=BPF msg=audit(1765873532.739:10642): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873532.739:10643): prog-id=587 op=LOAD
type=BPF msg=audit(1765873532.739:10644): prog-id=588 op=LOAD
type=BPF msg=audit(1765873532.739:10645): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873532.739:10646): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873532.740:10647): prog-id=589 op=LOAD
type=BPF msg=audit(1765873532.740:10648): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873532.994:10649): prog-id=590 op=LOAD
type=BPF msg=audit(1765873532.994:10650): prog-id=591 op=LOAD
type=BPF msg=audit(1765873532.994:10651): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873532.994:10652): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873532.998:10653): prog-id=592 op=LOAD
type=BPF msg=audit(1765873532.998:10654): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873533.003:10655): prog-id=593 op=LOAD
type=BPF msg=audit(1765873533.003:10656): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873533.004:10657): prog-id=594 op=LOAD
type=BPF msg=audit(1765873533.004:10658): prog-id=595 op=LOAD
type=BPF msg=audit(1765873533.004:10659): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873533.004:10660): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873533.004:10661): prog-id=596 op=LOAD
type=BPF msg=audit(1765873533.005:10662): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873533.005:10663): prog-id=597 op=LOAD
type=BPF msg=audit(1765873533.005:10664): prog-id=598 op=LOAD
type=BPF msg=audit(1765873533.005:10665): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873533.005:10666): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873533.006:10667): prog-id=599 op=LOAD
type=BPF msg=audit(1765873533.006:10668): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765873533.042:10669): pid=55070 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873533.042:10670): pid=55070 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873533.047:10671): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873533.047:10672): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873533.165:10673): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873533.165:10674): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873533.227:10675): pid=55160 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873533.228:10676): pid=55160 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74746D7979796B6A6763676B636370666B626D6C686F756D6D6273757469756F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873533.228:10677): pid=55160 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873533.233:10678): pid=55160 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873533.766:10679): prog-id=600 op=LOAD
type=BPF msg=audit(1765873533.766:10680): prog-id=601 op=LOAD
type=BPF msg=audit(1765873533.766:10681): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873533.766:10682): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873533.769:10683): prog-id=602 op=LOAD
type=BPF msg=audit(1765873533.769:10684): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873533.774:10685): prog-id=603 op=LOAD
type=BPF msg=audit(1765873533.774:10686): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873533.775:10687): prog-id=604 op=LOAD
type=BPF msg=audit(1765873533.775:10688): prog-id=605 op=LOAD
type=BPF msg=audit(1765873533.775:10689): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873533.775:10690): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873533.776:10691): prog-id=606 op=LOAD
type=BPF msg=audit(1765873533.776:10692): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873533.776:10693): prog-id=607 op=LOAD
type=BPF msg=audit(1765873533.776:10694): prog-id=608 op=LOAD
type=BPF msg=audit(1765873533.776:10695): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873533.776:10696): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873533.777:10697): prog-id=609 op=LOAD
type=BPF msg=audit(1765873533.777:10698): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873533.785:10699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873533.787:10700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765873534.055:10701): prog-id=610 op=LOAD
type=BPF msg=audit(1765873534.055:10702): prog-id=611 op=LOAD
type=BPF msg=audit(1765873534.055:10703): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873534.055:10704): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873534.058:10705): prog-id=612 op=LOAD
type=BPF msg=audit(1765873534.058:10706): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873534.064:10707): prog-id=613 op=LOAD
type=BPF msg=audit(1765873534.064:10708): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873534.064:10709): prog-id=614 op=LOAD
type=BPF msg=audit(1765873534.064:10710): prog-id=615 op=LOAD
type=BPF msg=audit(1765873534.064:10711): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873534.064:10712): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873534.065:10713): prog-id=616 op=LOAD
type=BPF msg=audit(1765873534.065:10714): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873534.065:10715): prog-id=617 op=LOAD
type=BPF msg=audit(1765873534.066:10716): prog-id=618 op=LOAD
type=BPF msg=audit(1765873534.066:10717): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873534.066:10718): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873534.067:10719): prog-id=619 op=LOAD
type=BPF msg=audit(1765873534.067:10720): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765873534.074:10721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873534.074:10722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873534.110:10723): pid=55160 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873534.110:10724): pid=55160 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873534.115:10725): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873534.115:10726): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873534.229:10727): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873534.229:10728): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873534.291:10729): pid=55285 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873534.291:10730): pid=55285 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726966726C666D766E646B7A7779626E61636475647776796B6874617876757A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873534.292:10731): pid=55285 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873534.296:10732): pid=55285 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873534.706:10733): prog-id=620 op=LOAD
type=BPF msg=audit(1765873534.706:10734): prog-id=621 op=LOAD
type=BPF msg=audit(1765873534.706:10735): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873534.706:10736): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873534.708:10737): prog-id=622 op=LOAD
type=BPF msg=audit(1765873534.709:10738): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873534.714:10739): prog-id=623 op=LOAD
type=BPF msg=audit(1765873534.714:10740): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873534.714:10741): prog-id=624 op=LOAD
type=BPF msg=audit(1765873534.714:10742): prog-id=625 op=LOAD
type=BPF msg=audit(1765873534.714:10743): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873534.714:10744): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873534.715:10745): prog-id=626 op=LOAD
type=BPF msg=audit(1765873534.715:10746): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873534.715:10747): prog-id=627 op=LOAD
type=BPF msg=audit(1765873534.715:10748): prog-id=628 op=LOAD
type=BPF msg=audit(1765873534.715:10749): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873534.715:10750): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873534.716:10751): prog-id=629 op=LOAD
type=BPF msg=audit(1765873534.716:10752): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765873534.746:10753): pid=55285 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873534.746:10754): pid=55285 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873534.750:10755): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873534.750:10756): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873534.855:10757): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873534.855:10758): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873534.887:10759): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873534.887:10760): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873534.929:10761): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873534.929:10762): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873534.964:10763): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873534.964:10764): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873535.006:10765): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873535.006:10766): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873535.060:10767): pid=55368 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873535.061:10768): pid=55368 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70636974746173766E6E6B787271787466676B647369766C6A6976766B626777203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873535.061:10769): pid=55368 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873535.066:10770): pid=55368 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873535.213:10771): pid=55368 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873535.214:10772): pid=55368 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873535.218:10773): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873535.218:10774): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873535.260:10775): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873535.260:10776): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873535.295:10777): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873535.295:10778): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873535.337:10779): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873535.337:10780): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873535.361:10781): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873535.361:10782): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873535.403:10783): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873535.403:10784): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873535.459:10785): pid=55411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873535.459:10786): pid=55411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62706B686C627A647165767669636564626961757275747871747178747A6470203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873535.460:10787): pid=55411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873535.462:10788): pid=55411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873535.644:10789): pid=55411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873535.645:10790): pid=55411 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873535.648:10791): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873535.648:10792): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873535.690:10793): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873535.690:10794): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873535.709:10795): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873535.709:10796): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873535.851:10797): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873535.851:10798): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873535.893:10799): pid=55441 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873535.893:10800): pid=55441 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7177736D73646268786F66676772726863626E796E68756E647A7A736F7677203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873535.894:10801): pid=55441 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873535.896:10802): pid=55441 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873536.421:10803): prog-id=630 op=LOAD
type=BPF msg=audit(1765873536.421:10804): prog-id=631 op=LOAD
type=BPF msg=audit(1765873536.421:10805): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873536.421:10806): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873536.424:10807): prog-id=632 op=LOAD
type=BPF msg=audit(1765873536.424:10808): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873536.431:10809): prog-id=633 op=LOAD
type=BPF msg=audit(1765873536.431:10810): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873536.431:10811): prog-id=634 op=LOAD
type=BPF msg=audit(1765873536.431:10812): prog-id=635 op=LOAD
type=BPF msg=audit(1765873536.431:10813): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873536.431:10814): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873536.432:10815): prog-id=636 op=LOAD
type=BPF msg=audit(1765873536.432:10816): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873536.432:10817): prog-id=637 op=LOAD
type=BPF msg=audit(1765873536.432:10818): prog-id=638 op=LOAD
type=BPF msg=audit(1765873536.432:10819): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873536.432:10820): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873536.433:10821): prog-id=639 op=LOAD
type=BPF msg=audit(1765873536.433:10822): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765873536.506:10823): pid=55441 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873536.506:10824): pid=55441 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873536.510:10825): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873536.510:10826): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873536.586:10827): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873536.586:10828): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873536.648:10829): pid=55496 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873536.648:10830): pid=55496 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6978766273797062696B6C616A7367746563616E6970667565687266786A6477203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873536.649:10831): pid=55496 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873536.652:10832): pid=55496 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873536.825:10833): pid=55496 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873536.825:10834): pid=55496 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873536.829:10835): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873536.829:10836): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873537.034:10837): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873537.034:10838): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873537.063:10839): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873537.063:10840): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873537.105:10841): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873537.105:10842): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873537.138:10843): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873537.138:10844): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873537.181:10845): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873537.181:10846): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873537.244:10847): pid=55546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873537.245:10848): pid=55546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776F686C6C6F6768626C6D6766646D636462766377797A687A746D70676A7A62203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873537.245:10849): pid=55546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873537.248:10850): pid=55546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873537.422:10851): pid=55546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873537.423:10852): pid=55546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873537.426:10853): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873537.426:10854): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873537.468:10855): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873537.468:10856): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873537.523:10857): pid=55564 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873537.523:10858): pid=55564 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D70686D79627074636C61686C786A7873646674676D7867797A6765726A657974203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873537.524:10859): pid=55564 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873537.526:10860): pid=55564 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873537.705:10861): pid=55564 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873537.705:10862): pid=55564 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873537.710:10863): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873537.710:10864): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873537.751:10865): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873537.751:10866): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873537.779:10867): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873537.779:10868): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873537.887:10869): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873537.887:10870): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873537.916:10871): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873537.916:10872): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873537.958:10873): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873537.958:10874): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873537.992:10875): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873537.992:10876): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873538.034:10877): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873538.034:10878): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873538.075:10879): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873538.075:10880): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873538.118:10881): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873538.118:10882): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873538.160:10883): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873538.160:10884): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873538.203:10885): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873538.203:10886): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873538.235:10887): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873538.235:10888): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873538.277:10889): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873538.277:10890): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873538.344:10891): pid=55668 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873538.344:10892): pid=55668 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873538.345:10893): pid=55668 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873538.348:10894): pid=55668 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873538.533:10895): pid=55668 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873538.534:10896): pid=55668 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873538.538:10897): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873538.538:10898): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873538.676:10899): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873538.676:10900): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873538.742:10901): pid=55692 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873538.742:10902): pid=55692 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7369776B777768767874636D666A66706A75697A6C67726762737A6B75716477203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873538.742:10903): pid=55692 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873538.744:10904): pid=55692 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873538.866:10905): pid=55692 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873538.866:10906): pid=55692 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873538.870:10907): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873538.870:10908): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873548.942:10909): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873548.942:10910): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873549.008:10911): pid=55858 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873549.009:10912): pid=55858 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6A6266776D707377686C79617A70787A636D6D657A79656F7279756E68667A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873549.010:10913): pid=55858 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873549.015:10914): pid=55858 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873549.177:10915): pid=55858 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873549.177:10916): pid=55858 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873549.182:10917): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873549.183:10918): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765873551.752:10919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r81e3cfb60b114b36b82f8f2d5c4eaead comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765873552.117:10920): prog-id=640 op=LOAD
type=BPF msg=audit(1765873552.117:10921): prog-id=641 op=LOAD
type=BPF msg=audit(1765873552.117:10922): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873552.117:10923): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873552.122:10924): prog-id=642 op=LOAD
type=BPF msg=audit(1765873552.122:10925): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873552.129:10926): prog-id=643 op=LOAD
type=BPF msg=audit(1765873552.129:10927): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873552.129:10928): prog-id=644 op=LOAD
type=BPF msg=audit(1765873552.129:10929): prog-id=645 op=LOAD
type=BPF msg=audit(1765873552.129:10930): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873552.129:10931): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873552.130:10932): prog-id=646 op=LOAD
type=BPF msg=audit(1765873552.130:10933): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873552.131:10934): prog-id=647 op=LOAD
type=BPF msg=audit(1765873552.131:10935): prog-id=648 op=LOAD
type=BPF msg=audit(1765873552.131:10936): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873552.131:10937): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873552.132:10938): prog-id=649 op=LOAD
type=BPF msg=audit(1765873552.132:10939): prog-id=0 op=UNLOAD
type=SOFTWARE_UPDATE msg=audit(1765873552.177:10940): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Digest-1.19-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.177:10941): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Digest-MD5-2.58-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.177:10942): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-B-0:1.80-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.177:10943): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-FileHandle-0:2.03-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.177:10944): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Data-Dumper-2.174-462.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.177:10945): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-libnet-3.13-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.177:10946): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-AutoLoader-0:5.74-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.177:10947): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-base-0:2.27-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.177:10948): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-URI-5.09-3.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.177:10949): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Time-Local-2:1.300-7.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.177:10950): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Mozilla-CA-20200520-6.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.177:10951): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-if-0:0.60.800-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.177:10952): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IO-Socket-IP-0.41-5.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.177:10953): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Text-Tabs+Wrap-2013.0523-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.177:10954): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Net-SSLeay-1.92-2.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.177:10955): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Escapes-1:1.07-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.177:10956): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Path-2.18-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.177:10957): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IO-Socket-SSL-2.073-1.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10958): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Term-ANSIColor-5.01-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10959): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Class-Struct-0:0.66-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10960): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-POSIX-0:1.94-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10961): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IPC-Open3-0:1.21-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10962): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-subs-0:1.03-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10963): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Term-Cap-1.17-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10964): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Simple-1:3.42-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10965): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Temp-1:0.231.100-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10966): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-HTTP-Tiny-0.076-461.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10967): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Socket-4:2.031-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10968): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-SelectSaver-0:1.02-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10969): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Symbol-0:1.08-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10970): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-stat-0:1.09-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10971): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-podlators-1:4.14-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10972): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Perldoc-3.28.01-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10973): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Text-ParseWords-3.30-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10974): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Fcntl-0:1.13-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10975): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-overloading-0:0.02-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10976): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-IO-0:1.43-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10977): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-mro-0:1.23-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10978): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Pod-Usage-4:2.01-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10979): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-parent-1:0.238-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10980): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-MIME-Base64-3.16-4.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10981): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Scalar-List-Utils-4:1.56-461.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10982): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-constant-1.33-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10983): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Errno-0:1.30-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10984): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Basename-0:2.85-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10985): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Getopt-Std-0:1.12-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10986): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Storable-1:3.21-460.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10987): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-overload-0:1.31-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10988): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-vars-0:1.05-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10989): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Getopt-Long-1:2.52-4.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10990): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Exporter-5.74-461.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10991): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Carp-1.50-460.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10992): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-PathTools-3.78-461.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10993): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-NDBM_File-0:1.15-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10994): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Encode-4:3.08-462.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10995): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-libs-4:5.32.1-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10996): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-interpreter-4:5.32.1-480.el9.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10997): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="net-snmp-libs-1:5.9.1-11.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10998): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-File-Copy-0:2.34-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:10999): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="perl-Term-ReadLine-0:1.17-480.el9.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:11000): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mariadb-connector-c-config-3.2.6-1.el9_0.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:11001): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="mariadb-connector-c-3.2.6-1.el9_0.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:11002): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="net-snmp-agent-libs-1:5.9.1-11.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SOFTWARE_UPDATE msg=audit(1765873552.178:11003): pid=55815 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=install sw="net-snmp-1:5.9.1-11.el9_2.2.x86_64" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="dnf" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873552.795:11004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873552.795:11005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873552.799:11006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r81e3cfb60b114b36b82f8f2d5c4eaead comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765873559.045:11007): prog-id=650 op=LOAD
type=BPF msg=audit(1765873559.045:11008): prog-id=651 op=LOAD
type=BPF msg=audit(1765873559.045:11009): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.045:11010): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.048:11011): prog-id=652 op=LOAD
type=BPF msg=audit(1765873559.049:11012): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.055:11013): prog-id=653 op=LOAD
type=BPF msg=audit(1765873559.055:11014): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.055:11015): prog-id=654 op=LOAD
type=BPF msg=audit(1765873559.055:11016): prog-id=655 op=LOAD
type=BPF msg=audit(1765873559.055:11017): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.055:11018): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.056:11019): prog-id=656 op=LOAD
type=BPF msg=audit(1765873559.056:11020): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.057:11021): prog-id=657 op=LOAD
type=BPF msg=audit(1765873559.057:11022): prog-id=658 op=LOAD
type=BPF msg=audit(1765873559.057:11023): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.057:11024): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.058:11025): prog-id=659 op=LOAD
type=BPF msg=audit(1765873559.058:11026): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873559.208:11027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=snmpd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765873559.260:11028): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873559.260:11029): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873559.342:11030): pid=57068 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873559.343:11031): pid=57068 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D616F656F736B73777464636F6778686D727266666C687864776167646D6A7161203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873559.346:11032): pid=57068 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873559.525:11033): prog-id=660 op=LOAD
type=BPF msg=audit(1765873559.525:11034): prog-id=661 op=LOAD
type=BPF msg=audit(1765873559.525:11035): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.525:11036): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.529:11037): prog-id=662 op=LOAD
type=BPF msg=audit(1765873559.529:11038): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.535:11039): prog-id=663 op=LOAD
type=BPF msg=audit(1765873559.535:11040): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.535:11041): prog-id=664 op=LOAD
type=BPF msg=audit(1765873559.536:11042): prog-id=665 op=LOAD
type=BPF msg=audit(1765873559.536:11043): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.536:11044): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.536:11045): prog-id=666 op=LOAD
type=BPF msg=audit(1765873559.537:11046): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.537:11047): prog-id=667 op=LOAD
type=BPF msg=audit(1765873559.537:11048): prog-id=668 op=LOAD
type=BPF msg=audit(1765873559.537:11049): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.537:11050): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.538:11051): prog-id=669 op=LOAD
type=BPF msg=audit(1765873559.538:11052): prog-id=0 op=UNLOAD
type=USER_START msg=audit(1765873559.558:11053): pid=57068 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873559.702:11054): pid=57068 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873559.702:11055): pid=57068 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873559.706:11056): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873559.706:11057): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=BPF msg=audit(1765873559.826:11058): prog-id=670 op=LOAD
type=BPF msg=audit(1765873559.826:11059): prog-id=671 op=LOAD
type=BPF msg=audit(1765873559.826:11060): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.826:11061): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.829:11062): prog-id=672 op=LOAD
type=BPF msg=audit(1765873559.829:11063): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.836:11064): prog-id=673 op=LOAD
type=BPF msg=audit(1765873559.836:11065): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.836:11066): prog-id=674 op=LOAD
type=BPF msg=audit(1765873559.836:11067): prog-id=675 op=LOAD
type=BPF msg=audit(1765873559.836:11068): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.836:11069): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.837:11070): prog-id=676 op=LOAD
type=BPF msg=audit(1765873559.837:11071): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.837:11072): prog-id=677 op=LOAD
type=BPF msg=audit(1765873559.837:11073): prog-id=678 op=LOAD
type=BPF msg=audit(1765873559.837:11074): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.837:11075): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873559.838:11076): prog-id=679 op=LOAD
type=BPF msg=audit(1765873559.838:11077): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873559.856:11078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873560.207:11079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873564.521:11080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873564.524:11081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765873564.579:11082): pid=57189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=57189 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1765873564.638:11083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765873564.694:11084): pid=57188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=57189 suid=74 rport=58968 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765873564.694:11085): pid=57188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=57189 suid=74 rport=58968 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1765873564.738:11086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765873565.203:11087): pid=57188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=78.128.112.74 addr=78.128.112.74 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765873566.924:11088): pid=57188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=57189 suid=74 rport=58968 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765873566.924:11089): pid=57188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=57189 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765873566.925:11090): pid=57188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=57188 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765873566.925:11091): pid=57188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=78.128.112.74 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765873569.778:11092): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873569.778:11093): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873569.851:11094): pid=57223 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873569.851:11095): pid=57223 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D616D7A7A796C676561727476636464617971716A70627A7872656E616E627A203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873569.852:11096): pid=57223 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873569.858:11097): pid=57223 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873570.036:11098): pid=57223 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873570.036:11099): pid=57223 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873570.041:11100): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873570.041:11101): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873570.480:11102): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873570.480:11103): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873570.545:11104): pid=57239 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873570.545:11105): pid=57239 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7669766470626D6170686E626D667370776B616A7978706A76786C7261797961203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873570.546:11106): pid=57239 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873570.548:11107): pid=57239 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873570.735:11108): pid=57239 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873570.735:11109): pid=57239 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873570.740:11110): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873570.740:11111): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873570.850:11112): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873570.850:11113): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873570.900:11114): pid=57255 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873570.900:11115): pid=57255 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7273636B7973727275696C756A7869676366746E657A66646F646F63746C796B203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873570.901:11116): pid=57255 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873570.903:11117): pid=57255 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873571.045:11118): pid=57255 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873571.045:11119): pid=57255 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873571.050:11120): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873571.050:11121): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873571.228:11122): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873571.228:11123): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873571.262:11124): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873571.262:11125): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873571.309:11126): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873571.309:11127): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873571.352:11128): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873571.352:11129): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873571.393:11130): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873571.393:11131): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873571.453:11132): pid=57305 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873571.454:11133): pid=57305 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D76786976766378686A616C7064627963707673646B71677279717A6E6D72676F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873571.455:11134): pid=57305 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873571.457:11135): pid=57305 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873571.677:11136): pid=57305 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873571.677:11137): pid=57305 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873571.682:11138): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873571.682:11139): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873571.732:11140): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873571.732:11141): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873571.796:11142): pid=57323 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873571.796:11143): pid=57323 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71797865687766737A6E68746F6F6D686D6574707878776F6F7768656C706870203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873571.797:11144): pid=57323 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873571.799:11145): pid=57323 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873571.975:11146): pid=57323 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873571.975:11147): pid=57323 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873571.979:11148): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873571.979:11149): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873572.021:11150): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873572.021:11151): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873572.054:11152): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873572.054:11153): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873572.151:11154): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873572.151:11155): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873572.216:11156): pid=57353 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873572.217:11157): pid=57353 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C73676B64687A666B717376617A6A61657866707A6374797463707669766F71203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873572.217:11158): pid=57353 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873572.220:11159): pid=57353 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873572.396:11160): pid=57353 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873572.397:11161): pid=57353 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873572.401:11162): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873572.401:11163): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873572.507:11164): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873572.507:11165): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873572.573:11166): pid=57369 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873572.574:11167): pid=57369 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F77737A66716963786666776C6378676D7976697A6478686E72776B7A6A6A68203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873572.574:11168): pid=57369 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873572.577:11169): pid=57369 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873573.074:11170): pid=57369 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873573.075:11171): pid=57369 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873573.079:11172): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873573.079:11173): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873573.331:11174): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873573.331:11175): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873573.384:11176): pid=57456 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873573.384:11177): pid=57456 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68626F786272716B6E7972756763666961626F616D7872666379646277776672203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873573.384:11178): pid=57456 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873573.386:11179): pid=57456 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873573.642:11180): pid=57456 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873573.642:11181): pid=57456 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873573.646:11182): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873573.646:11183): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873574.100:11184): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873574.100:11185): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873574.163:11186): pid=57475 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873574.163:11187): pid=57475 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D64737A7278677176766E62747166746D65676D6B6B6F667172697774736D6369203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873574.164:11188): pid=57475 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873574.166:11189): pid=57475 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873574.335:11190): pid=57475 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873574.335:11191): pid=57475 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873574.340:11192): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873574.340:11193): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873574.451:11194): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873574.451:11195): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873574.512:11196): pid=57491 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873574.513:11197): pid=57491 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676E6763776A78756E66656F69677267676B74727275656C72797A636C776B74203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873574.513:11198): pid=57491 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873574.516:11199): pid=57491 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873574.675:11200): pid=57491 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873574.675:11201): pid=57491 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873574.680:11202): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873574.680:11203): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873575.060:11204): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873575.060:11205): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873575.127:11206): pid=57507 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873575.128:11207): pid=57507 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696265716764697A7A78676569636D66617163767078626C7376706D6F7A746A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873575.128:11208): pid=57507 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873575.130:11209): pid=57507 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873575.309:11210): pid=57507 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873575.309:11211): pid=57507 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873575.314:11212): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873575.314:11213): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873575.489:11214): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873575.489:11215): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873575.521:11216): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873575.521:11217): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873575.563:11218): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873575.563:11219): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873575.601:11220): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873575.601:11221): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873575.642:11222): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873575.642:11223): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873575.704:11224): pid=57557 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873575.704:11225): pid=57557 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79666464706F7576777868737963787373676D66727A78766D777A616B7A7162203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873575.705:11226): pid=57557 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873575.708:11227): pid=57557 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873575.894:11228): pid=57557 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873575.894:11229): pid=57557 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873575.898:11230): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873575.898:11231): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873575.940:11232): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873575.940:11233): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873575.992:11234): pid=57575 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873575.993:11235): pid=57575 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6A7467686D67667265676F61656462796B6177696375647670686F73676A6871203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873575.993:11236): pid=57575 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873575.996:11237): pid=57575 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873576.180:11238): pid=57575 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873576.180:11239): pid=57575 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873576.185:11240): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873576.185:11241): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873576.227:11242): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873576.227:11243): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873576.258:11244): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873576.258:11245): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873576.330:11246): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873576.330:11247): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873576.362:11248): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873576.362:11249): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873576.404:11250): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873576.404:11251): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873576.443:11252): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873576.443:11253): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873576.485:11254): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873576.485:11255): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873576.550:11256): pid=57637 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873576.550:11257): pid=57637 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71776A626D697278647562776362657A767462776177726F6462767374706879203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873576.551:11258): pid=57637 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873576.553:11259): pid=57637 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873576.734:11260): pid=57637 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873576.734:11261): pid=57637 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873576.738:11262): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873576.738:11263): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873576.784:11264): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873576.784:11265): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873576.848:11266): pid=57655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873576.849:11267): pid=57655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73726F716C7972697A62707862686B6769756D69666D696772626E726D766D64203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873576.849:11268): pid=57655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873576.852:11269): pid=57655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873577.023:11270): pid=57655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873577.024:11271): pid=57655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873577.029:11272): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873577.029:11273): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873577.071:11274): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873577.071:11275): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873577.100:11276): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873577.101:11277): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873577.224:11278): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873577.224:11279): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873577.249:11280): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873577.250:11281): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873577.291:11282): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873577.291:11283): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873577.323:11284): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873577.324:11285): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873577.365:11286): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873577.365:11287): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873577.424:11288): pid=57717 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873577.424:11289): pid=57717 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756562796B666F6C686A78706C6C71696F6E746862686D79676B767377747077203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873577.424:11290): pid=57717 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873577.426:11291): pid=57717 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873577.594:11292): pid=57717 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873577.595:11293): pid=57717 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873577.598:11294): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873577.598:11295): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873577.640:11296): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873577.640:11297): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873577.701:11298): pid=57735 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873577.701:11299): pid=57735 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656C787372776868697468776B71686563737A727A64667565796D6873727666203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873577.702:11300): pid=57735 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873577.704:11301): pid=57735 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873577.879:11302): pid=57735 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873577.879:11303): pid=57735 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873577.882:11304): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873577.882:11305): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873577.915:11306): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873577.915:11307): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873577.948:11308): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873577.948:11309): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873578.056:11310): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873578.056:11311): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873578.084:11312): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873578.084:11313): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873578.126:11314): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873578.126:11315): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873578.160:11316): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873578.160:11317): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873578.202:11318): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873578.202:11319): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873578.256:11320): pid=57797 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873578.257:11321): pid=57797 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6866646D6A65726970796D737178707A7A786E71656A7A716B637777796B7863203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873578.257:11322): pid=57797 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873578.259:11323): pid=57797 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873578.442:11324): pid=57797 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873578.442:11325): pid=57797 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873578.445:11326): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873578.446:11327): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873578.487:11328): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873578.487:11329): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873578.550:11330): pid=57815 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873578.550:11331): pid=57815 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67696A6C6B777178616D7A78687A6A6A776464757679616E686D6D7176726C6B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873578.551:11332): pid=57815 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873578.553:11333): pid=57815 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873578.724:11334): pid=57815 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873578.724:11335): pid=57815 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873578.728:11336): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873578.729:11337): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873578.770:11338): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873578.771:11339): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873578.801:11340): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873578.801:11341): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873579.264:11342): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873579.264:11343): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873579.323:11344): pid=57845 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873579.323:11345): pid=57845 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67656E7A7576696F6F6D70787A6777686E65646E6877796F626F79726C6D6363203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873579.324:11346): pid=57845 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873579.326:11347): pid=57845 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873579.851:11348): prog-id=680 op=LOAD
type=BPF msg=audit(1765873579.851:11349): prog-id=681 op=LOAD
type=BPF msg=audit(1765873579.851:11350): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873579.851:11351): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873579.854:11352): prog-id=682 op=LOAD
type=BPF msg=audit(1765873579.854:11353): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873579.860:11354): prog-id=683 op=LOAD
type=BPF msg=audit(1765873579.860:11355): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873579.860:11356): prog-id=684 op=LOAD
type=BPF msg=audit(1765873579.860:11357): prog-id=685 op=LOAD
type=BPF msg=audit(1765873579.860:11358): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873579.860:11359): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873579.860:11360): prog-id=686 op=LOAD
type=BPF msg=audit(1765873579.860:11361): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873579.861:11362): prog-id=687 op=LOAD
type=BPF msg=audit(1765873579.861:11363): prog-id=688 op=LOAD
type=BPF msg=audit(1765873579.861:11364): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873579.861:11365): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873579.862:11366): prog-id=689 op=LOAD
type=BPF msg=audit(1765873579.862:11367): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765873579.931:11368): pid=57845 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873579.931:11369): pid=57845 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873579.936:11370): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873579.936:11371): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873580.051:11372): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873580.051:11373): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873580.081:11374): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873580.081:11375): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873580.126:11376): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873580.126:11377): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873580.161:11378): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873580.161:11379): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873580.205:11380): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873580.205:11381): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873580.266:11382): pid=57931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873580.267:11383): pid=57931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7576627467716864696D76676E66647764757466636E7771727A6A796A68786B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873580.267:11384): pid=57931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873580.272:11385): pid=57931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873580.449:11386): pid=57931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873580.450:11387): pid=57931 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873580.453:11388): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873580.453:11389): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873580.495:11390): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873580.495:11391): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873580.539:11392): pid=57949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873580.540:11393): pid=57949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6261656D6A6F6C6C6376697A6466796970616C61726E657A646976766A727574203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873580.540:11394): pid=57949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873580.542:11395): pid=57949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873580.705:11396): pid=57949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873580.705:11397): pid=57949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873580.709:11398): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873580.709:11399): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873580.751:11400): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873580.751:11401): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873580.783:11402): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873580.783:11403): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873580.871:11404): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873580.871:11405): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873580.901:11406): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873580.902:11407): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873580.943:11408): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873580.943:11409): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873580.979:11410): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873580.979:11411): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873581.021:11412): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873581.021:11413): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873581.084:11414): pid=58011 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873581.084:11415): pid=58011 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6167767674746A7079716D7279716D7779766C73727A626F6A776A626E6E7874203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873581.084:11416): pid=58011 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873581.086:11417): pid=58011 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873581.266:11418): pid=58011 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873581.266:11419): pid=58011 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873581.270:11420): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873581.270:11421): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873581.318:11422): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873581.318:11423): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873581.377:11424): pid=58029 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873581.377:11425): pid=58029 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D797A6A7569616C626F656D637363667676797A666E6365616E667761747A6F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873581.378:11426): pid=58029 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873581.380:11427): pid=58029 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873581.559:11428): pid=58029 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873581.560:11429): pid=58029 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873581.563:11430): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873581.564:11431): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873581.605:11432): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873581.605:11433): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873581.694:11434): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873581.694:11435): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873581.807:11436): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873581.807:11437): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873581.867:11438): pid=58059 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873581.867:11439): pid=58059 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C6679626277756E6768797A63716D68706678616962716A706A6574646C6176203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873581.868:11440): pid=58059 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873581.870:11441): pid=58059 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873582.429:11442): prog-id=690 op=LOAD
type=BPF msg=audit(1765873582.430:11443): prog-id=691 op=LOAD
type=BPF msg=audit(1765873582.430:11444): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873582.430:11445): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873582.434:11446): prog-id=692 op=LOAD
type=BPF msg=audit(1765873582.434:11447): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873582.443:11448): prog-id=693 op=LOAD
type=BPF msg=audit(1765873582.443:11449): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873582.443:11450): prog-id=694 op=LOAD
type=BPF msg=audit(1765873582.443:11451): prog-id=695 op=LOAD
type=BPF msg=audit(1765873582.443:11452): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873582.443:11453): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873582.444:11454): prog-id=696 op=LOAD
type=BPF msg=audit(1765873582.444:11455): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873582.444:11456): prog-id=697 op=LOAD
type=BPF msg=audit(1765873582.445:11457): prog-id=698 op=LOAD
type=BPF msg=audit(1765873582.445:11458): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873582.445:11459): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873582.446:11460): prog-id=699 op=LOAD
type=BPF msg=audit(1765873582.446:11461): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873582.527:11462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873582.527:11463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873582.548:11464): pid=58059 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873582.548:11465): pid=58059 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873582.552:11466): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873582.552:11467): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873582.774:11468): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873582.774:11469): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873582.826:11470): pid=58116 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873582.826:11471): pid=58116 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D716F6369746165766475696D6D77666678637972706B6A69626367656E68667A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873582.828:11472): pid=58116 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873582.833:11473): pid=58116 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873583.035:11474): pid=58116 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873583.035:11475): pid=58116 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873583.039:11476): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873583.039:11477): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873583.326:11478): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873583.326:11479): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873583.376:11480): pid=58132 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873583.376:11481): pid=58132 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646461786B717A6E686B6D6B657A646A6E756B6863716E6D6D61686A62647A61203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873583.377:11482): pid=58132 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873583.379:11483): pid=58132 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873583.836:11484): pid=58132 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873583.836:11485): pid=58132 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873583.880:11486): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873583.880:11487): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873584.710:11488): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873584.710:11489): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873584.773:11490): pid=58174 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873584.774:11491): pid=58174 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D71716D6F68726B75726B6B7964697A6B636E7671716B6F64726E6F627A6F786F203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873584.774:11492): pid=58174 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873584.777:11493): pid=58174 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873585.358:11494): prog-id=700 op=LOAD
type=SYSCALL msg=audit(1765873585.358:11494): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd81b520a0 a2=90 a3=9500000001 items=0 ppid=58399 pid=58401 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873585.358:11494): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F383232336533613836313531623933386637353738613734376537343838
type=BPF msg=audit(1765873585.404:11495): prog-id=701 op=LOAD
type=SYSCALL msg=audit(1765873585.404:11495): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffece7d6940 a2=90 a3=9500000001 items=0 ppid=58410 pid=58411 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873585.404:11495): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F326563613033306433666563653635653332386432373030646431663863
type=BPF msg=audit(1765873585.405:11496): prog-id=702 op=LOAD
type=SYSCALL msg=audit(1765873585.405:11496): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffebac7b2e0 a2=90 a3=9500000001 items=0 ppid=58409 pid=58412 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873585.405:11496): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F646263353034393336643330623962343031306631333931356433353565
type=BPF msg=audit(1765873585.453:11497): prog-id=703 op=LOAD
type=SYSCALL msg=audit(1765873585.453:11497): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc59d0ea50 a2=90 a3=9500000000 items=0 ppid=58419 pid=58420 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873585.453:11497): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376133326331313062353666323136393964343466633961303263613466
type=BPF msg=audit(1765873585.456:11498): prog-id=704 op=LOAD
type=SYSCALL msg=audit(1765873585.456:11498): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd31824c10 a2=90 a3=9500000001 items=0 ppid=58421 pid=58422 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873585.456:11498): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F386537626166326337336334356461346666303965613832613637363932
type=SERVICE_START msg=audit(1765873585.461:11499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765873585.465:11500): pid=58427 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873585.466:11501): pid=58427 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873585.467:11502): pid=58427 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1765873585.468:11503): pid=58427 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=BPF msg=audit(1765873585.497:11504): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1765873585.504:11505): pid=58448 uid=42405 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="ceilometer" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873585.505:11506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1765873585.506:11507): pid=58448 uid=42405 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873585.506:11508): pid=58448 uid=42405 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin"
type=USER_START msg=audit(1765873585.507:11509): pid=58448 uid=42405 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin"
type=USER_END msg=audit(1765873585.531:11510): pid=58427 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873585.531:11511): pid=58427 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873585.551:11512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873585.555:11513): pid=58448 uid=42405 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873585.555:11514): pid=58448 uid=42405 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin"
type=USER_ACCT msg=audit(1765873585.612:11515): pid=58523 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873585.612:11516): pid=58523 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873585.613:11517): pid=58523 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1765873585.614:11518): pid=58523 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873585.619:11519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873585.656:11520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873585.673:11521): pid=58523 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873585.673:11522): pid=58523 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873585.709:11523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873585.829:11524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1765873585.951:11525): prog-id=705 op=LOAD
type=SYSCALL msg=audit(1765873585.951:11525): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffde7f61770 a2=90 a3=9500000001 items=0 ppid=58680 pid=58681 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873585.951:11525): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F336465376361353662643133376661363432383731303933353632666466
type=SERVICE_STOP msg=audit(1765873586.124:11526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765873586.421:11527): pid=58705 uid=42405 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="ceilometer" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873586.421:11528): pid=58705 uid=42405 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd=6365696C6F6D657465722D726F6F7477726170202F6574632F6365696C6F6D657465722F726F6F74777261702E636F6E6620707269767365702D68656C706572202D2D707269767365705F636F6E74657874206365696C6F6D657465722E707269767365702E7379735F61646D696E5F7063747874202D2D707269767365705F736F636B5F70617468202F746D702F746D706E3237757A7361732F707269767365702E736F636B exe="/usr/bin/sudo" terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873586.423:11529): pid=58705 uid=42405 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin"
type=USER_START msg=audit(1765873586.425:11530): pid=58705 uid=42405 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin"
type=USER_END msg=audit(1765873587.016:11531): pid=58705 uid=42405 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873587.017:11532): pid=58705 uid=42405 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42405)" AUID="tripleo-admin"
type=BPF msg=audit(1765873588.882:11533): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873589.366:11534): prog-id=706 op=LOAD
type=SYSCALL msg=audit(1765873589.366:11534): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7fffddc1a030 a2=90 a3=9500000001 items=0 ppid=58975 pid=58976 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873589.366:11534): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F323436326236643236383865323534353761633766326134386162633035
type=BPF msg=audit(1765873589.367:11535): prog-id=707 op=LOAD
type=SYSCALL msg=audit(1765873589.367:11535): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd9042ba20 a2=90 a3=9500000001 items=0 ppid=58973 pid=58974 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873589.367:11535): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F353939616566353335626432343862303332333533373538313833353731
type=USER_ACCT msg=audit(1765873589.407:11536): pid=58982 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873589.407:11537): pid=58982 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873589.407:11538): pid=58982 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873589.422:11539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873589.469:11540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873589.488:11541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765873589.489:11542): pid=59009 uid=42435 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="neutron" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873589.489:11543): pid=59009 uid=42435 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873589.490:11544): pid=59009 uid=42435 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin"
type=USER_START msg=audit(1765873589.491:11545): pid=59009 uid=42435 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin"
type=USER_ACCT msg=audit(1765873589.495:11546): pid=59005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1765873589.495:11547): pid=59005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1765873589.496:11548): pid=59005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765873589.496:11549): pid=59005 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=17 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1765873589.496:11549): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd96b0f580 a2=1 a3=0 items=0 ppid=1 pid=59005 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873589.496:11549): proctitle="(systemd)"
type=USER_START msg=audit(1765873589.498:11550): pid=59005 uid=0 auid=0 ses=17 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1765873589.517:11551): prog-id=708 op=LOAD
type=SYSCALL msg=audit(1765873589.517:11551): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffaa3d2a10 a2=90 a3=0 items=0 ppid=1 pid=59005 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873589.517:11551): proctitle="(systemd)"
type=BPF msg=audit(1765873589.518:11552): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873589.518:11553): prog-id=709 op=LOAD
type=SYSCALL msg=audit(1765873589.518:11553): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffaa3d2ab0 a2=90 a3=4 items=0 ppid=1 pid=59005 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873589.518:11553): proctitle="(systemd)"
type=BPF msg=audit(1765873589.518:11554): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765873589.537:11555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1765873589.541:11556): pid=59009 uid=42435 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873589.541:11557): pid=59009 uid=42435 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873589.651:11558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873589.660:11559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765873589.678:11560): pid=58982 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1765873589.706:11561): pid=58174 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873589.706:11562): pid=58174 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873589.710:11563): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873589.710:11564): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873589.742:11565): pid=58982 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873589.743:11566): pid=58982 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="tripleo-admin"
type=ANOM_PROMISCUOUS msg=audit(1765873589.764:11567): dev=br-int prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1765873589.764:11567): arch=c000003e syscall=46 success=yes exit=52 a0=15 a1=7ffde1169e10 a2=0 a3=0 items=0 ppid=1 pid=22009 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1765873589.764:11567): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=USER_LOGIN msg=audit(1765873589.910:11568): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873589.910:11569): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873589.978:11570): pid=59112 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873589.978:11571): pid=59112 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6661787864797273736F77616C6D7979776F7577646279767371776978776B75203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873589.979:11572): pid=59112 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873589.985:11573): pid=59112 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=ANOM_PROMISCUOUS msg=audit(1765873590.005:11574): dev=genev_sys_6081 prom=256 old_prom=0 auid=4294967295 uid=986 gid=985 ses=4294967295AUID="unset" UID="openvswitch" GID="hugetlbfs"
type=SYSCALL msg=audit(1765873590.005:11574): arch=c000003e syscall=46 success=yes exit=60 a0=15 a1=7ffde1169e10 a2=0 a3=17c1 items=0 ppid=1 pid=22009 auid=4294967295 uid=986 gid=985 euid=986 suid=986 fsuid=986 egid=985 sgid=985 fsgid=985 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="unset" UID="openvswitch" GID="hugetlbfs" EUID="openvswitch" SUID="openvswitch" FSUID="openvswitch" EGID="hugetlbfs" SGID="hugetlbfs" FSGID="hugetlbfs"
type=PROCTITLE msg=audit(1765873590.005:11574): proctitle=6F76732D767377697463686400756E69783A2F7661722F72756E2F6F70656E767377697463682F64622E736F636B002D76636F6E736F6C653A656D6572002D767379736C6F673A657272002D7666696C653A696E666F002D2D6D6C6F636B616C6C002D2D75736572006F70656E767377697463683A68756765746C626673002D
type=USER_END msg=audit(1765873590.178:11575): pid=59112 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873590.178:11576): pid=59112 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873590.182:11577): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873590.183:11578): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873590.224:11579): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873590.224:11580): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873590.285:11581): pid=59131 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873590.285:11582): pid=59131 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78676D7669737567686B68776B69677A627964656270716C666B6D64666B6C78203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873590.286:11583): pid=59131 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873590.306:11584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765873590.307:11585): pid=59131 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873590.490:11586): pid=59131 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873590.490:11587): pid=59131 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873590.494:11588): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873590.494:11589): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873590.535:11590): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873590.535:11591): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873590.577:11592): pid=59176 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873590.577:11593): pid=59176 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736D6965617075777968646372627A6F6E657964786F71716B6F6A666B726375203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873590.577:11594): pid=59176 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873590.581:11595): pid=59176 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873590.616:11596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873590.736:11597): pid=59176 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873590.736:11598): pid=59176 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873590.740:11599): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873590.740:11600): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873590.782:11601): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873590.782:11602): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873590.828:11603): pid=59192 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873590.828:11604): pid=59192 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7474676C616A776470716A6B62616D616F727662667476797A71727868746F72203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873590.829:11605): pid=59192 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873590.831:11606): pid=59192 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873591.008:11607): pid=59192 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873591.008:11608): pid=59192 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873591.013:11609): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873591.013:11610): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873591.054:11611): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873591.054:11612): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873591.102:11613): pid=59208 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873591.102:11614): pid=59208 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F726275626262786666756A6969797065786863676173677662747062616979203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873591.104:11615): pid=59208 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873591.106:11616): pid=59208 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_ACCT msg=audit(1765873591.186:11617): pid=59212 uid=42435 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="neutron" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873591.186:11618): pid=59212 uid=42435 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd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exe="/usr/bin/sudo" terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873591.188:11619): pid=59212 uid=42435 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin"
type=USER_START msg=audit(1765873591.190:11620): pid=59212 uid=42435 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin"
type=USER_END msg=audit(1765873591.265:11621): pid=59208 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873591.266:11622): pid=59208 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873591.270:11623): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873591.270:11624): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873591.312:11625): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873591.312:11626): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873591.368:11627): pid=59227 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873591.368:11628): pid=59227 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A67676E6364706B69706F6D6E68786D677A686464786774616C6F7370777871203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873591.369:11629): pid=59227 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873591.372:11630): pid=59227 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873591.533:11631): pid=59227 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873591.533:11632): pid=59227 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873591.537:11633): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873591.537:11634): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873591.579:11635): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873591.579:11636): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873591.634:11637): pid=59244 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873591.634:11638): pid=59244 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F757767676E6C77756F786B6B796C66796F7A6D727072716C6F7A6F73616479203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873591.635:11639): pid=59244 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873591.637:11640): pid=59244 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873591.792:11641): pid=59244 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873591.792:11642): pid=59244 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873591.797:11643): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873591.797:11644): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873591.838:11645): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873591.838:11646): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873591.883:11647): pid=59212 uid=42435 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873591.883:11648): pid=59212 uid=42435 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42435)" AUID="tripleo-admin"
type=USER_ACCT msg=audit(1765873591.888:11649): pid=59261 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873591.888:11650): pid=59261 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E62626C736B75736874616A666B6A6E627567756C78746F69796869766D6671203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873591.888:11651): pid=59261 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873591.890:11652): pid=59261 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873592.044:11653): pid=59261 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873592.044:11654): pid=59261 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873592.047:11655): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873592.047:11656): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873592.090:11657): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873592.090:11658): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873592.145:11659): pid=59278 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873592.146:11660): pid=59278 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6261736E7A67637465786564796E77676E7970767477656F72787665647463203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873592.147:11661): pid=59278 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873592.149:11662): pid=59278 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873592.274:11663): pid=59278 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873592.275:11664): pid=59278 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873592.279:11665): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873592.279:11666): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873592.320:11667): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873592.320:11668): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873592.382:11669): pid=59296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873592.382:11670): pid=59296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D776167736D6477746C71656F707179647367626A6A696171786D6979656A666C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873592.383:11671): pid=59296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873592.385:11672): pid=59296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873592.553:11673): pid=59296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873592.554:11674): pid=59296 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873592.558:11675): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873592.558:11676): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873592.600:11677): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873592.600:11678): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873592.649:11679): pid=59313 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873592.649:11680): pid=59313 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62747368626667796B647566726A767A666B6B67696A6877727370757262696C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873592.650:11681): pid=59313 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873592.652:11682): pid=59313 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873592.775:11683): pid=59313 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873592.775:11684): pid=59313 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873592.778:11685): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873592.778:11686): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873592.819:11687): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873592.820:11688): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873592.871:11689): pid=59329 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873592.871:11690): pid=59329 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D656E626A657A666963786968666E6D6C67796966666261627462786F74617261203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873592.871:11691): pid=59329 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873592.873:11692): pid=59329 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873593.001:11693): pid=59329 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873593.001:11694): pid=59329 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873593.005:11695): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873593.005:11696): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873593.047:11697): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873593.047:11698): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873593.075:11699): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873593.075:11700): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873593.116:11701): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873593.116:11702): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873593.153:11703): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873593.154:11704): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873593.343:11705): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873593.343:11706): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873593.382:11707): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873593.382:11708): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873593.424:11709): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873593.424:11710): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873593.486:11711): pid=59390 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873593.487:11712): pid=59390 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646C61637677696E6F63687A7772786F766C70787879646B716B6474776B756C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873593.487:11713): pid=59390 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873593.489:11714): pid=59390 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873593.653:11715): pid=59390 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873593.653:11716): pid=59390 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873593.657:11717): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873593.657:11718): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873593.913:11719): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873593.913:11720): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873593.952:11721): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873593.953:11722): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873593.994:11723): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873593.994:11724): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873594.060:11725): pid=59419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873594.061:11726): pid=59419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72766C6569686A6F716D796869657074717375697A646679796C7A7762697868203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873594.061:11727): pid=59419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873594.064:11728): pid=59419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873594.238:11729): pid=59419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873594.239:11730): pid=59419 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873594.244:11731): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873594.244:11732): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873594.441:11733): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873594.441:11734): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873594.480:11735): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873594.480:11736): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873594.533:11737): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873594.533:11738): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873594.593:11739): pid=59448 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873594.593:11740): pid=59448 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F6F6A75616A6E746764666261636F636F797968677A616D6A73726E75687977203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873594.594:11741): pid=59448 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873594.596:11742): pid=59448 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873594.764:11743): pid=59448 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873594.764:11744): pid=59448 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873594.768:11745): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873594.768:11746): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873594.934:11747): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873594.934:11748): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873594.973:11749): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873594.973:11750): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873595.015:11751): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873595.015:11752): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873595.086:11753): pid=59477 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873595.086:11754): pid=59477 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686C706D6D677063666474737978637A6A67787679616C66636F617166667079203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873595.087:11755): pid=59477 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873595.091:11756): pid=59477 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873595.105:11757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873595.108:11758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873595.223:11759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873595.276:11760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873595.286:11761): pid=59477 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873595.286:11762): pid=59477 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873595.290:11763): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873595.290:11764): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873595.484:11765): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873595.484:11766): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873595.521:11767): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873595.521:11768): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873595.563:11769): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873595.563:11770): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873595.612:11771): pid=59546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873595.612:11772): pid=59546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D676667786776696F617179717976646C626E7170787A7A7A64617A75696E6F76203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873595.612:11773): pid=59546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873595.616:11774): pid=59546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873595.769:11775): pid=59546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873595.769:11776): pid=59546 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873595.773:11777): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873595.773:11778): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873595.966:11779): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873595.966:11780): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873596.005:11781): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873596.005:11782): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873596.046:11783): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873596.046:11784): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873596.104:11785): pid=59575 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873596.105:11786): pid=59575 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F76627A6A7961757A686E757371636477616A687A786C776868797671767266203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873596.105:11787): pid=59575 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873596.107:11788): pid=59575 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873596.270:11789): pid=59575 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873596.270:11790): pid=59575 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873596.274:11791): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873596.274:11792): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873596.317:11793): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873596.317:11794): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873596.373:11795): pid=59591 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873596.373:11796): pid=59591 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6B706E7364726766626468716972666C6171666C7A6A796D746C61746D6578203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873596.374:11797): pid=59591 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873596.376:11798): pid=59591 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873596.982:11799): prog-id=710 op=LOAD
type=BPF msg=audit(1765873596.982:11800): prog-id=711 op=LOAD
type=BPF msg=audit(1765873596.982:11801): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873596.982:11802): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873596.986:11803): prog-id=712 op=LOAD
type=BPF msg=audit(1765873596.986:11804): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873596.992:11805): prog-id=713 op=LOAD
type=BPF msg=audit(1765873596.993:11806): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873596.993:11807): prog-id=714 op=LOAD
type=BPF msg=audit(1765873596.993:11808): prog-id=715 op=LOAD
type=BPF msg=audit(1765873596.993:11809): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873596.993:11810): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873596.994:11811): prog-id=716 op=LOAD
type=BPF msg=audit(1765873596.994:11812): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873596.994:11813): prog-id=717 op=LOAD
type=BPF msg=audit(1765873596.994:11814): prog-id=718 op=LOAD
type=BPF msg=audit(1765873596.994:11815): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873596.994:11816): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873596.995:11817): prog-id=719 op=LOAD
type=BPF msg=audit(1765873596.995:11818): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765873597.026:11819): pid=59591 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873597.027:11820): pid=59591 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873597.030:11821): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873597.030:11822): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873597.462:11823): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873597.462:11824): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873597.522:11825): pid=59643 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873597.523:11826): pid=59643 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D646E7566676A6C73767368737061726A6A68707568736A686B66616373687476203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873597.524:11827): pid=59643 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873597.529:11828): pid=59643 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873598.069:11829): prog-id=720 op=LOAD
type=BPF msg=audit(1765873598.069:11830): prog-id=721 op=LOAD
type=BPF msg=audit(1765873598.069:11831): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873598.069:11832): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873598.073:11833): prog-id=722 op=LOAD
type=BPF msg=audit(1765873598.073:11834): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873598.081:11835): prog-id=723 op=LOAD
type=BPF msg=audit(1765873598.081:11836): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873598.081:11837): prog-id=724 op=LOAD
type=BPF msg=audit(1765873598.081:11838): prog-id=725 op=LOAD
type=BPF msg=audit(1765873598.081:11839): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873598.081:11840): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873598.082:11841): prog-id=726 op=LOAD
type=BPF msg=audit(1765873598.082:11842): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873598.082:11843): prog-id=727 op=LOAD
type=BPF msg=audit(1765873598.082:11844): prog-id=728 op=LOAD
type=BPF msg=audit(1765873598.082:11845): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873598.082:11846): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873598.084:11847): prog-id=729 op=LOAD
type=BPF msg=audit(1765873598.084:11848): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873598.466:11849): prog-id=730 op=LOAD
type=BPF msg=audit(1765873598.466:11850): prog-id=731 op=LOAD
type=BPF msg=audit(1765873598.466:11851): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873598.466:11852): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873598.470:11853): prog-id=732 op=LOAD
type=BPF msg=audit(1765873598.470:11854): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873598.476:11855): prog-id=733 op=LOAD
type=BPF msg=audit(1765873598.476:11856): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873598.477:11857): prog-id=734 op=LOAD
type=BPF msg=audit(1765873598.477:11858): prog-id=735 op=LOAD
type=BPF msg=audit(1765873598.477:11859): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873598.477:11860): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873598.477:11861): prog-id=736 op=LOAD
type=BPF msg=audit(1765873598.478:11862): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873598.478:11863): prog-id=737 op=LOAD
type=BPF msg=audit(1765873598.478:11864): prog-id=738 op=LOAD
type=BPF msg=audit(1765873598.478:11865): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873598.478:11866): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873598.479:11867): prog-id=739 op=LOAD
type=BPF msg=audit(1765873598.479:11868): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873598.488:11869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ceilometer_agent_compute comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873598.520:11870): pid=59643 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873598.521:11871): pid=59643 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873598.525:11872): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873598.525:11873): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873598.766:11874): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873598.766:11875): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873598.816:11876): pid=59767 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873598.817:11877): pid=59767 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706B6B6D757975736C717A7961726C677A7969706E6F776F72736762756D716C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873598.817:11878): pid=59767 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873598.820:11879): pid=59767 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873599.770:11880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873599.807:11881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765873600.375:11882): prog-id=740 op=LOAD
type=BPF msg=audit(1765873600.375:11883): prog-id=741 op=LOAD
type=BPF msg=audit(1765873600.375:11884): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873600.376:11885): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873600.379:11886): prog-id=742 op=LOAD
type=BPF msg=audit(1765873600.379:11887): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873600.386:11888): prog-id=743 op=LOAD
type=BPF msg=audit(1765873600.386:11889): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873600.386:11890): prog-id=744 op=LOAD
type=BPF msg=audit(1765873600.386:11891): prog-id=745 op=LOAD
type=BPF msg=audit(1765873600.386:11892): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873600.386:11893): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873600.387:11894): prog-id=746 op=LOAD
type=BPF msg=audit(1765873600.387:11895): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873600.387:11896): prog-id=747 op=LOAD
type=BPF msg=audit(1765873600.387:11897): prog-id=748 op=LOAD
type=BPF msg=audit(1765873600.387:11898): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873600.387:11899): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873600.388:11900): prog-id=749 op=LOAD
type=BPF msg=audit(1765873600.388:11901): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873600.484:11902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ceilometer_agent_ipmi comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873600.512:11903): pid=59767 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873600.512:11904): pid=59767 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873600.518:11905): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873600.518:11906): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873600.758:11907): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873600.758:11908): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873600.818:11909): pid=59835 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873600.818:11910): pid=59835 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706C716A73696E63626E717970666E697674617477787A777A6864686F6C726E203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873600.819:11911): pid=59835 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873600.824:11912): pid=59835 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873601.432:11913): prog-id=750 op=LOAD
type=BPF msg=audit(1765873601.433:11914): prog-id=751 op=LOAD
type=BPF msg=audit(1765873601.433:11915): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873601.433:11916): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873601.436:11917): prog-id=752 op=LOAD
type=BPF msg=audit(1765873601.436:11918): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873601.443:11919): prog-id=753 op=LOAD
type=BPF msg=audit(1765873601.443:11920): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873601.443:11921): prog-id=754 op=LOAD
type=BPF msg=audit(1765873601.443:11922): prog-id=755 op=LOAD
type=BPF msg=audit(1765873601.443:11923): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873601.444:11924): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873601.444:11925): prog-id=756 op=LOAD
type=BPF msg=audit(1765873601.445:11926): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873601.445:11927): prog-id=757 op=LOAD
type=BPF msg=audit(1765873601.445:11928): prog-id=758 op=LOAD
type=BPF msg=audit(1765873601.445:11929): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873601.445:11930): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873601.446:11931): prog-id=759 op=LOAD
type=BPF msg=audit(1765873601.446:11932): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873601.517:11933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_logrotate_crond comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873601.543:11934): pid=59835 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873601.544:11935): pid=59835 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873601.548:11936): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873601.548:11937): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873602.050:11938): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873602.050:11939): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873602.102:11940): pid=59902 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873602.102:11941): pid=59902 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E6E65676E63656378657773676478726D796A797A7375716B667A61787A6173203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873602.103:11942): pid=59902 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873602.107:11943): pid=59902 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873602.680:11944): prog-id=760 op=LOAD
type=BPF msg=audit(1765873602.680:11945): prog-id=761 op=LOAD
type=BPF msg=audit(1765873602.680:11946): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873602.680:11947): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873602.684:11948): prog-id=762 op=LOAD
type=BPF msg=audit(1765873602.684:11949): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873602.691:11950): prog-id=763 op=LOAD
type=BPF msg=audit(1765873602.691:11951): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873602.691:11952): prog-id=764 op=LOAD
type=BPF msg=audit(1765873602.691:11953): prog-id=765 op=LOAD
type=BPF msg=audit(1765873602.691:11954): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873602.691:11955): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873602.692:11956): prog-id=766 op=LOAD
type=BPF msg=audit(1765873602.692:11957): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873602.692:11958): prog-id=767 op=LOAD
type=BPF msg=audit(1765873602.692:11959): prog-id=768 op=LOAD
type=BPF msg=audit(1765873602.692:11960): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873602.692:11961): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873602.693:11962): prog-id=769 op=LOAD
type=BPF msg=audit(1765873602.693:11963): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873602.784:11964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_migration_target comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873602.813:11965): pid=59902 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873602.813:11966): pid=59902 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873602.818:11967): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873602.818:11968): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873603.240:11969): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873603.240:11970): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873603.304:11971): pid=59970 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873603.305:11972): pid=59970 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D67706662756E7573746B6A73786967676F65796F6C6D766B6271656B71746E64203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873603.305:11973): pid=59970 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873603.310:11974): pid=59970 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873603.939:11975): prog-id=770 op=LOAD
type=BPF msg=audit(1765873603.939:11976): prog-id=771 op=LOAD
type=BPF msg=audit(1765873603.939:11977): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873603.939:11978): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873603.943:11979): prog-id=772 op=LOAD
type=BPF msg=audit(1765873603.943:11980): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873603.950:11981): prog-id=773 op=LOAD
type=BPF msg=audit(1765873603.950:11982): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873603.950:11983): prog-id=774 op=LOAD
type=BPF msg=audit(1765873603.950:11984): prog-id=775 op=LOAD
type=BPF msg=audit(1765873603.950:11985): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873603.950:11986): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873603.951:11987): prog-id=776 op=LOAD
type=BPF msg=audit(1765873603.951:11988): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873603.951:11989): prog-id=777 op=LOAD
type=BPF msg=audit(1765873603.951:11990): prog-id=778 op=LOAD
type=BPF msg=audit(1765873603.951:11991): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873603.951:11992): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873603.952:11993): prog-id=779 op=LOAD
type=BPF msg=audit(1765873603.952:11994): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873604.404:11995): prog-id=780 op=LOAD
type=BPF msg=audit(1765873604.404:11996): prog-id=781 op=LOAD
type=BPF msg=audit(1765873604.404:11997): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873604.404:11998): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873604.408:11999): prog-id=782 op=LOAD
type=BPF msg=audit(1765873604.408:12000): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873604.415:12001): prog-id=783 op=LOAD
type=BPF msg=audit(1765873604.415:12002): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873604.415:12003): prog-id=784 op=LOAD
type=BPF msg=audit(1765873604.415:12004): prog-id=785 op=LOAD
type=BPF msg=audit(1765873604.415:12005): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873604.415:12006): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873604.416:12007): prog-id=786 op=LOAD
type=BPF msg=audit(1765873604.416:12008): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873604.416:12009): prog-id=787 op=LOAD
type=BPF msg=audit(1765873604.416:12010): prog-id=788 op=LOAD
type=BPF msg=audit(1765873604.416:12011): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873604.416:12012): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873604.417:12013): prog-id=789 op=LOAD
type=BPF msg=audit(1765873604.417:12014): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873604.425:12015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_controller comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873604.455:12016): pid=59970 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873604.455:12017): pid=59970 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873604.462:12018): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873604.462:12019): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873604.711:12020): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873604.711:12021): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873604.775:12022): pid=60095 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873604.776:12023): pid=60095 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D636376626F736262737562786862737A616773666E69646A677A61666A6A7678203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873604.777:12024): pid=60095 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873604.784:12025): pid=60095 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873605.386:12026): prog-id=790 op=LOAD
type=BPF msg=audit(1765873605.386:12027): prog-id=791 op=LOAD
type=BPF msg=audit(1765873605.386:12028): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873605.386:12029): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873605.390:12030): prog-id=792 op=LOAD
type=BPF msg=audit(1765873605.390:12031): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873605.397:12032): prog-id=793 op=LOAD
type=BPF msg=audit(1765873605.397:12033): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873605.397:12034): prog-id=794 op=LOAD
type=BPF msg=audit(1765873605.397:12035): prog-id=795 op=LOAD
type=BPF msg=audit(1765873605.397:12036): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873605.397:12037): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873605.398:12038): prog-id=796 op=LOAD
type=BPF msg=audit(1765873605.398:12039): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873605.398:12040): prog-id=797 op=LOAD
type=BPF msg=audit(1765873605.398:12041): prog-id=798 op=LOAD
type=BPF msg=audit(1765873605.398:12042): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873605.398:12043): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873605.399:12044): prog-id=799 op=LOAD
type=BPF msg=audit(1765873605.399:12045): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873605.478:12046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_metadata_agent comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873605.493:12047): pid=60095 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873605.494:12048): pid=60095 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873605.498:12049): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873605.498:12050): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873605.544:12051): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873605.544:12052): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873605.573:12053): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873605.573:12054): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873605.691:12055): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873605.691:12056): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873605.741:12057): pid=60174 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873605.750:12058): pid=60174 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6D766466737163657272636B616178756D646A6E6D627372766F757A627164203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873605.750:12059): pid=60174 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873605.753:12060): pid=60174 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873605.930:12061): pid=60174 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873605.930:12062): pid=60174 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873605.934:12063): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873605.934:12064): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873606.208:12065): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873606.208:12066): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873606.230:12067): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873606.230:12068): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873606.272:12069): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873606.272:12070): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873606.303:12071): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873606.303:12072): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873606.348:12073): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873606.348:12074): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873606.397:12075): pid=60222 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873606.398:12076): pid=60222 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6669616B627A706578736E6F796663797378656B6E74697674656D72786D6362203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873606.398:12077): pid=60222 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873606.401:12078): pid=60222 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873606.537:12079): pid=60222 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873606.537:12080): pid=60222 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873606.541:12081): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873606.541:12082): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873606.583:12083): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873606.583:12084): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873606.618:12085): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873606.619:12086): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873606.664:12087): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873606.664:12088): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873606.696:12089): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873606.696:12090): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873606.738:12091): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873606.738:12092): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873606.790:12093): pid=60265 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873606.790:12094): pid=60265 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6962657379636F78636E726F6C746376777A617279667178747364727161686D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873606.790:12095): pid=60265 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873606.835:12096): pid=60265 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873606.997:12097): pid=60265 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873606.997:12098): pid=60265 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873607.001:12099): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873607.002:12100): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873607.043:12101): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873607.043:12102): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873607.071:12103): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873607.071:12104): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873607.196:12105): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873607.196:12106): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873607.256:12107): pid=60295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873607.257:12108): pid=60295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726C7864757273716E746F6C74737566676469747773706E6C6C676E63726E67203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873607.257:12109): pid=60295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873607.260:12110): pid=60295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873607.457:12111): pid=60295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873607.458:12112): pid=60295 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873607.461:12113): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873607.461:12114): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873607.793:12115): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873607.793:12116): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873607.855:12117): pid=60312 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873607.855:12118): pid=60312 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726B6A657269706B6B7A6A68656878716F696E69686869626F67657664646C6F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873607.856:12119): pid=60312 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873607.859:12120): pid=60312 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873608.040:12121): pid=60312 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873608.041:12122): pid=60312 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873608.044:12123): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873608.044:12124): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873608.164:12125): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873608.164:12126): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873608.222:12127): pid=60328 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873608.223:12128): pid=60328 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72626367776F78777369616F6865757675646F616A666668667071747A6E7566203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873608.223:12129): pid=60328 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873608.226:12130): pid=60328 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873608.414:12131): pid=60328 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873608.414:12132): pid=60328 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873608.419:12133): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873608.419:12134): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765873616.521:12135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873616.524:12136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873616.527:12137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873616.531:12138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873616.699:12139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873616.762:12140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873616.846:12141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873617.113:12142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873620.518:12143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873620.522:12144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873620.696:12145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873620.718:12146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873620.847:12147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873620.997:12148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873625.518:12149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873625.522:12150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873625.641:12151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873625.755:12152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873647.528:12153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873647.531:12154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873647.534:12155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873647.536:12156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873647.745:12157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873647.751:12158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873647.844:12159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873648.128:12160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873651.519:12161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873651.522:12162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873651.525:12163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873651.721:12164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873651.753:12165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873651.862:12166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873656.567:12167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873656.570:12168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873656.676:12169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873656.732:12170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873678.530:12171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873678.533:12172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873678.537:12173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873678.540:12174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873678.712:12175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873678.789:12176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873678.816:12177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873679.053:12178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873682.522:12179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873682.525:12180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873682.527:12181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873682.673:12182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873682.815:12183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873682.878:12184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873687.519:12185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873687.522:12186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873687.631:12187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873687.689:12188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873709.527:12189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873709.531:12190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873709.535:12191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873709.540:12192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873709.708:12193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873709.728:12194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873709.875:12195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873710.125:12196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873713.524:12197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873713.526:12198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873713.528:12199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873713.656:12200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873713.755:12201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873713.945:12202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873718.523:12203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873718.525:12204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873718.647:12205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873718.699:12206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873740.520:12207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873740.524:12208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873740.527:12209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873740.530:12210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873740.639:12211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873740.706:12212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873740.791:12213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873741.113:12214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765873743.049:12215): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25901 suid=1000 rport=34804 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765873743.054:12216): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765873743.055:12217): pid=25898 uid=0 auid=1000 ses=13 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1765873744.521:12218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873744.525:12219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873744.529:12220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873744.705:12221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873744.745:12222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873744.817:12223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873749.521:12224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873749.524:12225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873749.634:12226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873749.768:12227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765873751.699:12228): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873751.699:12229): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873751.736:12230): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873751.736:12231): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873751.779:12232): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873751.779:12233): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873751.817:12234): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873751.817:12235): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873751.862:12236): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873751.862:12237): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873751.927:12238): pid=61408 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873751.927:12239): pid=61408 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6572636A656569676471786C7977756C6A746E6B74796A676873676165626670203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873751.929:12240): pid=61408 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873751.935:12241): pid=61408 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873752.102:12242): pid=61408 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873752.102:12243): pid=61408 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873752.107:12244): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873752.107:12245): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873752.149:12246): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873752.149:12247): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873752.190:12248): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873752.190:12249): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873752.239:12250): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873752.239:12251): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873752.270:12252): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873752.270:12253): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873752.312:12254): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873752.312:12255): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873752.373:12256): pid=61453 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873752.373:12257): pid=61453 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D726E626F79726F78797874687A66707472766B75796E626E70626B6C6475796F203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873752.374:12258): pid=61453 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873752.376:12259): pid=61453 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873752.527:12260): pid=61453 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873752.527:12261): pid=61453 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873752.532:12262): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873752.532:12263): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873752.574:12264): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873752.574:12265): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873752.603:12266): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873752.603:12267): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873752.994:12268): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873752.994:12269): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873753.048:12270): pid=61483 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873753.048:12271): pid=61483 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74657369627976667173786762616A6F76646A777761776A7A6A726B7A72666D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873753.049:12272): pid=61483 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873753.051:12273): pid=61483 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873753.221:12274): pid=61483 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873753.221:12275): pid=61483 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873753.224:12276): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873753.225:12277): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873753.590:12278): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873753.590:12279): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873753.612:12280): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873753.612:12281): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873753.654:12282): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873753.654:12283): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873753.691:12284): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873753.691:12285): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873753.733:12286): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873753.733:12287): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873753.786:12288): pid=61533 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873753.787:12289): pid=61533 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6762766A6F62716C657963677A7166786770776772746B7872666169746A6267203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873753.788:12290): pid=61533 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873753.790:12291): pid=61533 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873753.970:12292): pid=61533 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873753.971:12293): pid=61533 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873753.974:12294): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873753.974:12295): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873754.016:12296): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873754.016:12297): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873754.071:12298): pid=61551 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873754.071:12299): pid=61551 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6878796C787173736264797470636563686C787A666264736A676179747A6164203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873754.071:12300): pid=61551 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873754.073:12301): pid=61551 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873754.257:12302): pid=61551 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873754.257:12303): pid=61551 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873754.260:12304): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873754.260:12305): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873754.302:12306): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873754.302:12307): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873754.333:12308): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873754.333:12309): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873754.455:12310): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873754.455:12311): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873754.476:12312): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873754.476:12313): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873754.518:12314): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873754.518:12315): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873754.542:12316): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873754.542:12317): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873754.593:12318): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873754.593:12319): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873754.636:12320): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873754.636:12321): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873754.679:12322): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873754.680:12323): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873754.718:12324): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873754.718:12325): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873754.760:12326): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873754.760:12327): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873754.793:12328): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873754.793:12329): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873754.844:12330): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873754.844:12331): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873754.905:12332): pid=61655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873754.906:12333): pid=61655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd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exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873754.906:12334): pid=61655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873754.909:12335): pid=61655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873755.082:12336): pid=61655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873755.083:12337): pid=61655 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873755.086:12338): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873755.086:12339): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873755.212:12340): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873755.212:12341): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873755.262:12342): pid=61676 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873755.263:12343): pid=61676 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D79626A6869776C6C756E6A7473686C6D6D666E70646F746D7662746C776C7262203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873755.263:12344): pid=61676 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873755.265:12345): pid=61676 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873755.436:12346): pid=61676 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873755.436:12347): pid=61676 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873755.439:12348): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873755.439:12349): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765873761.827:12350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873761.827:12351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765873765.515:12352): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873765.515:12353): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873765.570:12354): pid=61823 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873765.570:12355): pid=61823 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6371776A756E636C646670767379616D6D7164687262726A726D746C676C7866203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873765.571:12356): pid=61823 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873765.574:12357): pid=61823 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873765.700:12358): pid=61823 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873765.700:12359): pid=61823 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873765.705:12360): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873765.705:12361): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873766.174:12362): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873766.174:12363): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873766.235:12364): pid=61839 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873766.236:12365): pid=61839 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D68736B7779767479696576676368637A7A7772677A786F697966777571677069203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873766.237:12366): pid=61839 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873766.241:12367): pid=61839 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873766.447:12368): pid=61839 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873766.448:12369): pid=61839 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873766.453:12370): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873766.453:12371): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873766.579:12372): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873766.579:12373): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873766.646:12374): pid=61855 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873766.646:12375): pid=61855 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D756A78656F7261636D75687864766E72676A647774747A6A6E7A6E7671627973203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873766.647:12376): pid=61855 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873766.650:12377): pid=61855 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873766.835:12378): pid=61855 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873766.836:12379): pid=61855 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873766.839:12380): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873766.839:12381): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873767.015:12382): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873767.015:12383): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873767.043:12384): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873767.044:12385): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873767.085:12386): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873767.085:12387): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873767.117:12388): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873767.117:12389): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873767.158:12390): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873767.158:12391): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873767.201:12392): pid=61905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873767.202:12393): pid=61905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6676616D6C7270616E70706C617771676D6770676C6C776D7370716572646170203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873767.202:12394): pid=61905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873767.205:12395): pid=61905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873767.341:12396): pid=61905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873767.342:12397): pid=61905 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873767.345:12398): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873767.345:12399): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873767.387:12400): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873767.387:12401): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873767.434:12402): pid=61923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873767.435:12403): pid=61923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7A6972667A62676972756665626466626E6578697276716D637762746C776D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873767.435:12404): pid=61923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873767.436:12405): pid=61923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873767.619:12406): pid=61923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873767.620:12407): pid=61923 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873767.623:12408): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873767.623:12409): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873767.665:12410): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873767.665:12411): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873767.695:12412): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873767.695:12413): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873767.810:12414): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873767.810:12415): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873767.870:12416): pid=61953 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873767.871:12417): pid=61953 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D647A746D6D6F6F6277647A6A74696470616D776C757165776E696870716C6861203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873767.871:12418): pid=61953 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873767.874:12419): pid=61953 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873768.079:12420): pid=61953 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873768.079:12421): pid=61953 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873768.082:12422): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873768.083:12423): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873768.221:12424): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873768.221:12425): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873768.284:12426): pid=61969 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873768.285:12427): pid=61969 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B7166767177656D7075616D647969687866766C6969636C6B6279746E797A66203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873768.285:12428): pid=61969 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873768.288:12429): pid=61969 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873768.786:12430): pid=61969 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873768.787:12431): pid=61969 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873768.791:12432): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873768.791:12433): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873768.968:12434): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873768.968:12435): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873769.030:12436): pid=62058 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873769.030:12437): pid=62058 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73656C686B6B727870677072706C726C6C6973616B6862796E63797477737073203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873769.031:12438): pid=62058 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873769.033:12439): pid=62058 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873769.257:12440): pid=62058 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873769.258:12441): pid=62058 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873769.262:12442): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873769.262:12443): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873769.705:12444): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873769.705:12445): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873769.754:12446): pid=62077 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873769.754:12447): pid=62077 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C7875647A72786C7A66626161786E6F6C6E716B6D636E746C67637374687075203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873769.755:12448): pid=62077 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873769.758:12449): pid=62077 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873769.896:12450): pid=62077 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873769.897:12451): pid=62077 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873769.901:12452): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873769.901:12453): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873769.992:12454): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873769.992:12455): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873770.043:12456): pid=62093 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873770.044:12457): pid=62093 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6774686179767363726F6377716C6B63626C62637A67796D6D6879706F69676B203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873770.044:12458): pid=62093 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873770.047:12459): pid=62093 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873770.192:12460): pid=62093 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873770.193:12461): pid=62093 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873770.197:12462): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873770.197:12463): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873770.485:12464): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873770.485:12465): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873770.539:12466): pid=62109 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873770.539:12467): pid=62109 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E66627A6C61777267796C726E726B6C71676565627864657069797863616E6D203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873770.540:12468): pid=62109 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873770.542:12469): pid=62109 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873770.701:12470): pid=62109 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873770.702:12471): pid=62109 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873770.705:12472): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873770.705:12473): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873770.885:12474): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873770.885:12475): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873770.912:12476): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873770.912:12477): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873770.955:12478): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873770.955:12479): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873770.989:12480): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873770.989:12481): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873771.031:12482): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873771.031:12483): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873771.091:12484): pid=62159 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873771.091:12485): pid=62159 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D66766670766964636A677279656E736361786B6B79766C7A677761676E61786C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873771.092:12486): pid=62159 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873771.095:12487): pid=62159 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873771.104:12488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873771.106:12489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873771.107:12490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873771.197:12491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873771.292:12492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873771.294:12493): pid=62159 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873771.294:12494): pid=62159 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873771.298:12495): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873771.298:12496): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873771.318:12497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765873771.341:12498): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873771.341:12499): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873771.368:12500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765873771.386:12501): pid=62274 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873771.386:12502): pid=62274 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6F636E6361786D6F69776A61677165706570687863696B696161727A6F617763203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873771.386:12503): pid=62274 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873771.389:12504): pid=62274 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873771.569:12505): pid=62274 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873771.570:12506): pid=62274 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873771.574:12507): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873771.574:12508): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873771.645:12509): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873771.645:12510): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873771.670:12511): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873771.671:12512): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873771.726:12513): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873771.726:12514): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873771.729:12515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873771.756:12516): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873771.756:12517): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873771.799:12518): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873771.799:12519): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873771.835:12520): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873771.835:12521): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873771.877:12522): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873771.877:12523): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873771.940:12524): pid=62337 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873771.940:12525): pid=62337 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686C63756672756A6C766473776F686E6C706B726E726471777677686B6B6163203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873771.941:12526): pid=62337 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873771.944:12527): pid=62337 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873772.088:12528): pid=62337 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873772.089:12529): pid=62337 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873772.093:12530): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873772.093:12531): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873772.134:12532): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873772.134:12533): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873772.197:12534): pid=62355 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873772.198:12535): pid=62355 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D626A6C6A68637069746E6A6C6373747265696F646879726472666B6F62686977203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873772.198:12536): pid=62355 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873772.200:12537): pid=62355 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873772.341:12538): pid=62355 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873772.342:12539): pid=62355 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873772.346:12540): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873772.346:12541): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873772.399:12542): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873772.399:12543): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873772.424:12544): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873772.424:12545): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873772.565:12546): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873772.565:12547): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873772.588:12548): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873772.588:12549): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873772.629:12550): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873772.629:12551): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873772.661:12552): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873772.661:12553): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873772.707:12554): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873772.707:12555): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873772.767:12556): pid=62417 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873772.767:12557): pid=62417 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D706C7867616173756568796461666D727062656B676D676E7763687A6665687A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873772.768:12558): pid=62417 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873772.770:12559): pid=62417 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873772.953:12560): pid=62417 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873772.954:12561): pid=62417 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873772.958:12562): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873772.958:12563): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873773.000:12564): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873773.000:12565): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873773.064:12566): pid=62435 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873773.064:12567): pid=62435 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6C73646D75716C6779786F776B70706563676375786266736A6F696E6A7669203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873773.064:12568): pid=62435 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873773.067:12569): pid=62435 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873773.240:12570): pid=62435 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873773.240:12571): pid=62435 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873773.245:12572): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873773.245:12573): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873773.286:12574): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873773.286:12575): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873773.318:12576): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873773.318:12577): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873773.445:12578): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873773.445:12579): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873773.479:12580): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873773.480:12581): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873773.521:12582): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873773.521:12583): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873773.558:12584): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873773.559:12585): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873773.600:12586): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873773.600:12587): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873773.662:12588): pid=62497 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873773.662:12589): pid=62497 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A7767646E6D7A776D66717561696174726E6F626C7463737176796263697362203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873773.663:12590): pid=62497 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873773.665:12591): pid=62497 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873773.851:12592): pid=62497 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873773.851:12593): pid=62497 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873773.877:12594): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873773.877:12595): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873773.919:12596): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873773.919:12597): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873773.986:12598): pid=62515 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873773.987:12599): pid=62515 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696D696C7262756A786C75677070706E72796B73706A69756D76666C63737863203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873773.987:12600): pid=62515 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873773.990:12601): pid=62515 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873774.162:12602): pid=62515 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873774.163:12603): pid=62515 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873774.167:12604): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873774.167:12605): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873774.208:12606): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873774.209:12607): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873774.238:12608): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873774.238:12609): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873774.369:12610): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873774.369:12611): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873774.429:12612): pid=62545 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873774.430:12613): pid=62545 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6D7667696A6E756A6D74697162726D636A7A6F6473736E797763716F67716B69203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873774.430:12614): pid=62545 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873774.433:12615): pid=62545 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873774.984:12616): prog-id=800 op=LOAD
type=BPF msg=audit(1765873774.984:12617): prog-id=801 op=LOAD
type=BPF msg=audit(1765873774.984:12618): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873774.984:12619): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873774.988:12620): prog-id=802 op=LOAD
type=BPF msg=audit(1765873774.988:12621): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873774.995:12622): prog-id=803 op=LOAD
type=BPF msg=audit(1765873774.995:12623): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873774.995:12624): prog-id=804 op=LOAD
type=BPF msg=audit(1765873774.995:12625): prog-id=805 op=LOAD
type=BPF msg=audit(1765873774.995:12626): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873774.995:12627): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873774.996:12628): prog-id=806 op=LOAD
type=BPF msg=audit(1765873774.996:12629): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873774.996:12630): prog-id=807 op=LOAD
type=BPF msg=audit(1765873774.996:12631): prog-id=808 op=LOAD
type=BPF msg=audit(1765873774.996:12632): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873774.996:12633): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873774.997:12634): prog-id=809 op=LOAD
type=BPF msg=audit(1765873774.997:12635): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873775.007:12636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873775.009:12637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873775.011:12638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873775.061:12639): pid=62545 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873775.061:12640): pid=62545 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873775.066:12641): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873775.066:12642): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873775.154:12643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765873775.186:12644): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873775.186:12645): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873775.215:12646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873775.218:12647): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873775.218:12648): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873775.260:12649): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873775.260:12650): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873775.297:12651): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873775.297:12652): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873775.339:12653): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873775.339:12654): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873775.391:12655): pid=62705 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873775.392:12656): pid=62705 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E7965707A66627A666E6C646E686C7461796877647A6F6461776C7876717564203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873775.392:12657): pid=62705 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873775.396:12658): pid=62705 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873775.494:12659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873775.614:12660): pid=62705 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873775.615:12661): pid=62705 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873775.618:12662): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873775.618:12663): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873775.660:12664): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873775.660:12665): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873775.722:12666): pid=62723 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873775.722:12667): pid=62723 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7563687074796D75617667696D7773626F6466716A686B656B79797068687979203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873775.723:12668): pid=62723 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873775.725:12669): pid=62723 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873775.945:12670): pid=62723 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873775.946:12671): pid=62723 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873775.950:12672): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873775.950:12673): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873775.992:12674): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873775.992:12675): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873776.023:12676): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873776.023:12677): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873776.185:12678): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873776.185:12679): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873776.216:12680): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873776.216:12681): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873776.258:12682): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873776.258:12683): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873776.294:12684): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873776.294:12685): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873776.335:12686): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873776.335:12687): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873776.384:12688): pid=62785 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873776.384:12689): pid=62785 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C647574706D7A696D616A6A6579717575677A646D746961686E776876627164203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873776.385:12690): pid=62785 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873776.387:12691): pid=62785 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873776.568:12692): pid=62785 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873776.568:12693): pid=62785 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873776.571:12694): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873776.571:12695): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873776.613:12696): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873776.613:12697): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873776.700:12698): pid=62803 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873776.700:12699): pid=62803 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A70796A746E6B6E74676C7574707166697A6F636F746563647872616C667169203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873776.701:12700): pid=62803 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873776.703:12701): pid=62803 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873776.886:12702): pid=62803 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873776.887:12703): pid=62803 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873776.890:12704): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873776.890:12705): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873776.931:12706): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873776.931:12707): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873776.964:12708): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873776.964:12709): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873777.086:12710): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873777.086:12711): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873777.147:12712): pid=62833 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873777.147:12713): pid=62833 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D737A7274786E6773656770636E7775757A6864677A7773777179686374756562203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873777.148:12714): pid=62833 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873777.151:12715): pid=62833 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873777.748:12716): prog-id=810 op=LOAD
type=BPF msg=audit(1765873777.748:12717): prog-id=811 op=LOAD
type=BPF msg=audit(1765873777.749:12718): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873777.749:12719): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873777.753:12720): prog-id=812 op=LOAD
type=BPF msg=audit(1765873777.753:12721): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873777.760:12722): prog-id=813 op=LOAD
type=BPF msg=audit(1765873777.760:12723): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873777.760:12724): prog-id=814 op=LOAD
type=BPF msg=audit(1765873777.760:12725): prog-id=815 op=LOAD
type=BPF msg=audit(1765873777.760:12726): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873777.760:12727): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873777.761:12728): prog-id=816 op=LOAD
type=BPF msg=audit(1765873777.761:12729): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873777.762:12730): prog-id=817 op=LOAD
type=BPF msg=audit(1765873777.762:12731): prog-id=818 op=LOAD
type=BPF msg=audit(1765873777.762:12732): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873777.762:12733): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873777.763:12734): prog-id=819 op=LOAD
type=BPF msg=audit(1765873777.763:12735): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873777.849:12736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873777.849:12737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=netns-placeholder comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873777.875:12738): pid=62833 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873777.876:12739): pid=62833 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873777.880:12740): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873777.880:12741): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873778.108:12742): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873778.108:12743): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873778.166:12744): pid=62890 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873778.167:12745): pid=62890 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74787863667076737566666B746F6E69766468786875646F766E796F6766687A203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873778.167:12746): pid=62890 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873778.170:12747): pid=62890 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873778.364:12748): pid=62890 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873778.365:12749): pid=62890 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873778.370:12750): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873778.370:12751): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873778.594:12752): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873778.594:12753): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873778.655:12754): pid=62906 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873778.655:12755): pid=62906 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6E647278616D6B61726D647A677167626C656C736C676773796A6966796F6774203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873778.656:12756): pid=62906 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873778.658:12757): pid=62906 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873779.165:12758): pid=62906 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873779.166:12759): pid=62906 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873779.211:12760): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873779.211:12761): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873780.289:12762): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873780.289:12763): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873780.337:12764): pid=62949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873780.337:12765): pid=62949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73767A776E70637469797963716D7A65696462657A6166706864756D67757763203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873780.338:12766): pid=62949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873780.354:12767): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873780.357:12768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765873780.359:12769): pid=62949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1765873780.518:12770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873780.568:12771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765873780.914:12772): prog-id=820 op=LOAD
type=SYSCALL msg=audit(1765873780.914:12772): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffc7d2bdc80 a2=90 a3=9500000001 items=0 ppid=63045 pid=63046 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873780.914:12772): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393361646133316362623032656531646162623465653435356433393361
type=USER_ACCT msg=audit(1765873780.981:12773): pid=63051 uid=42436 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="nova" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42436)" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873780.981:12774): pid=63051 uid=42436 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="unknown(42436)" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873780.982:12775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1765873780.982:12776): pid=63051 uid=42436 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42436)" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765873781.035:12777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765873781.082:12778): pid=63070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1765873781.082:12779): pid=63070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1765873781.083:12780): pid=63070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765873781.084:12781): pid=63070 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=18 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1765873781.084:12781): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffd96b0f580 a2=1 a3=0 items=0 ppid=1 pid=63070 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873781.084:12781): proctitle="(systemd)"
type=USER_START msg=audit(1765873781.087:12782): pid=63070 uid=0 auid=0 ses=18 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1765873781.106:12783): prog-id=821 op=LOAD
type=SYSCALL msg=audit(1765873781.106:12783): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe53aa9a10 a2=90 a3=0 items=0 ppid=1 pid=63070 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873781.106:12783): proctitle="(systemd)"
type=BPF msg=audit(1765873781.107:12784): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873781.107:12785): prog-id=822 op=LOAD
type=SYSCALL msg=audit(1765873781.107:12785): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe53aa9ab0 a2=90 a3=4 items=0 ppid=1 pid=63070 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873781.107:12785): proctitle="(systemd)"
type=BPF msg=audit(1765873781.107:12786): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1765873781.175:12787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873781.244:12788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1765873781.274:12789): pid=63051 uid=42436 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42436)" AUID="tripleo-admin"
type=USER_END msg=audit(1765873781.365:12790): pid=63051 uid=42436 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42436)" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873781.367:12791): pid=63051 uid=42436 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="unknown(42436)" AUID="tripleo-admin"
type=BPF msg=audit(1765873781.622:12792): prog-id=823 op=LOAD
type=SYSCALL msg=audit(1765873781.622:12792): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe69124dd0 a2=90 a3=9500000000 items=0 ppid=63166 pid=63167 auid=1002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="3" exe="/" subj=unconfined_u:unconfined_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="tripleo-admin" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873781.622:12792): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623361333831303763613033323563313837313236616664363737313466
type=CRED_DISP msg=audit(1765873791.521:12793): pid=63080 uid=0 auid=0 ses=18 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1765873791.522:12794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873791.555:12795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1765873793.080:12796): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765873793.351:12797): pid=62949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873793.351:12798): pid=62949 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873793.356:12799): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873793.356:12800): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873793.525:12801): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873793.525:12802): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873793.593:12803): pid=63275 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873793.594:12804): pid=63275 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D73746E6D7A7964616A6D706179677377716176666767636C646B6C75626A736C203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873793.594:12805): pid=63275 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873793.599:12806): pid=63275 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873793.777:12807): pid=63275 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873793.777:12808): pid=63275 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873793.781:12809): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873793.781:12810): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873793.823:12811): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873793.823:12812): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873793.888:12813): pid=63291 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873793.888:12814): pid=63291 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D65756D736C7766706F636165636866626875766A7668676D716C707565777A79203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873793.889:12815): pid=63291 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873793.891:12816): pid=63291 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873794.048:12817): pid=63291 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873794.048:12818): pid=63291 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873794.052:12819): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873794.052:12820): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873794.087:12821): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873794.088:12822): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873794.119:12823): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873794.119:12824): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873794.161:12825): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873794.161:12826): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873794.203:12827): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873794.203:12828): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873794.422:12829): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873794.422:12830): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873794.460:12831): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873794.460:12832): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873794.502:12833): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873794.502:12834): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873794.562:12835): pid=63352 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873794.562:12836): pid=63352 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C69766C76736C6D696669716E717A7A74646F6B736C73777866797577667464203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873794.563:12837): pid=63352 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873794.566:12838): pid=63352 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873794.749:12839): pid=63352 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873794.749:12840): pid=63352 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873794.754:12841): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873794.754:12842): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873794.799:12843): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873794.799:12844): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873794.870:12845): pid=63368 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873794.871:12846): pid=63368 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D757A6E677163706665796971626A6D6A79636E6F69747069696467676F6A6372203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873794.871:12847): pid=63368 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873794.874:12848): pid=63368 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873795.480:12849): prog-id=824 op=LOAD
type=BPF msg=audit(1765873795.480:12850): prog-id=825 op=LOAD
type=BPF msg=audit(1765873795.480:12851): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873795.480:12852): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873795.484:12853): prog-id=826 op=LOAD
type=BPF msg=audit(1765873795.484:12854): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873795.491:12855): prog-id=827 op=LOAD
type=BPF msg=audit(1765873795.491:12856): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873795.491:12857): prog-id=828 op=LOAD
type=BPF msg=audit(1765873795.491:12858): prog-id=829 op=LOAD
type=BPF msg=audit(1765873795.491:12859): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873795.491:12860): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873795.492:12861): prog-id=830 op=LOAD
type=BPF msg=audit(1765873795.492:12862): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873795.492:12863): prog-id=831 op=LOAD
type=BPF msg=audit(1765873795.492:12864): prog-id=832 op=LOAD
type=BPF msg=audit(1765873795.492:12865): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873795.492:12866): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873795.494:12867): prog-id=833 op=LOAD
type=BPF msg=audit(1765873795.494:12868): prog-id=0 op=UNLOAD
type=USER_END msg=audit(1765873795.528:12869): pid=63368 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873795.529:12870): pid=63368 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873795.534:12871): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873795.534:12872): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873795.811:12873): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873795.811:12874): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873795.868:12875): pid=63420 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873795.868:12876): pid=63420 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D696C696D776E6267657A70766A6474677373686562716F6C6C727A6E6E6A7466203B20545249504C454F5F4D494E4F525F5550444154453D46616C7365202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873795.869:12877): pid=63420 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873795.873:12878): pid=63420 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=BPF msg=audit(1765873796.460:12879): prog-id=834 op=LOAD
type=BPF msg=audit(1765873796.460:12880): prog-id=835 op=LOAD
type=BPF msg=audit(1765873796.461:12881): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873796.461:12882): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873796.464:12883): prog-id=836 op=LOAD
type=BPF msg=audit(1765873796.464:12884): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873796.471:12885): prog-id=837 op=LOAD
type=BPF msg=audit(1765873796.472:12886): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873796.472:12887): prog-id=838 op=LOAD
type=BPF msg=audit(1765873796.472:12888): prog-id=839 op=LOAD
type=BPF msg=audit(1765873796.472:12889): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873796.472:12890): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873796.473:12891): prog-id=840 op=LOAD
type=BPF msg=audit(1765873796.473:12892): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873796.473:12893): prog-id=841 op=LOAD
type=BPF msg=audit(1765873796.473:12894): prog-id=842 op=LOAD
type=BPF msg=audit(1765873796.473:12895): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873796.473:12896): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873796.474:12897): prog-id=843 op=LOAD
type=BPF msg=audit(1765873796.474:12898): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873796.974:12899): prog-id=844 op=LOAD
type=BPF msg=audit(1765873796.974:12900): prog-id=845 op=LOAD
type=BPF msg=audit(1765873796.974:12901): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873796.974:12902): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873796.978:12903): prog-id=846 op=LOAD
type=BPF msg=audit(1765873796.978:12904): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873796.986:12905): prog-id=847 op=LOAD
type=BPF msg=audit(1765873796.986:12906): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873796.986:12907): prog-id=848 op=LOAD
type=BPF msg=audit(1765873796.986:12908): prog-id=849 op=LOAD
type=BPF msg=audit(1765873796.986:12909): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873796.986:12910): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873796.987:12911): prog-id=850 op=LOAD
type=BPF msg=audit(1765873796.987:12912): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873796.987:12913): prog-id=851 op=LOAD
type=BPF msg=audit(1765873796.987:12914): prog-id=852 op=LOAD
type=BPF msg=audit(1765873796.987:12915): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873796.987:12916): prog-id=0 op=UNLOAD
type=BPF msg=audit(1765873796.988:12917): prog-id=853 op=LOAD
type=BPF msg=audit(1765873796.988:12918): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1765873796.998:12919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_compute comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873797.017:12920): pid=63420 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873797.017:12921): pid=63420 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873797.022:12922): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873797.023:12923): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873797.073:12924): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873797.073:12925): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873797.107:12926): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873797.107:12927): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873797.221:12928): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873797.221:12929): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873797.281:12930): pid=63556 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873797.281:12931): pid=63556 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6B6D696875666C78717173646275677A6969716E6C676F6F78796463756E6B6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873797.281:12932): pid=63556 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873797.285:12933): pid=63556 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873797.475:12934): pid=63556 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873797.475:12935): pid=63556 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873797.479:12936): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873797.480:12937): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873797.740:12938): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873797.740:12939): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873797.770:12940): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873797.770:12941): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873797.812:12942): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873797.812:12943): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873797.842:12944): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873797.843:12945): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873797.884:12946): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873797.884:12947): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873797.944:12948): pid=63604 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873797.944:12949): pid=63604 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D677168666F6A6F736A676977756E626F6D726764797767697769766162667665203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873797.945:12950): pid=63604 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873797.949:12951): pid=63604 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873798.131:12952): pid=63604 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873798.131:12953): pid=63604 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873798.136:12954): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873798.137:12955): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873798.178:12956): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873798.178:12957): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873798.211:12958): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873798.211:12959): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873798.253:12960): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873798.253:12961): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873798.321:12962): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873798.321:12963): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873798.363:12964): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873798.363:12965): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873798.420:12966): pid=63647 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873798.420:12967): pid=63647 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D78736362626D696B7762747970766E67707A7567656D67797A70716F64656A70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873798.421:12968): pid=63647 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873798.423:12969): pid=63647 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873798.604:12970): pid=63647 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873798.604:12971): pid=63647 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873798.608:12972): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873798.608:12973): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873798.651:12974): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873798.651:12975): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_END msg=audit(1765873798.676:12976): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873798.676:12977): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873798.770:12978): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873798.770:12979): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873798.824:12980): pid=63677 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873798.824:12981): pid=63677 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6C757775676F7267687573627576657862786B666F6F747969656F6861676A64203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873798.825:12982): pid=63677 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873798.827:12983): pid=63677 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873799.006:12984): pid=63677 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873799.006:12985): pid=63677 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873799.011:12986): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873799.011:12987): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873799.299:12988): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873799.299:12989): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873799.357:12990): pid=63693 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873799.357:12991): pid=63693 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D736C7269776F73796B6C7062796E616F72786E796E6A63666E6B64656D61626D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873799.357:12992): pid=63693 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873799.360:12993): pid=63693 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873799.535:12994): pid=63693 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873799.536:12995): pid=63693 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873799.540:12996): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873799.540:12997): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGIN msg=audit(1765873799.707:12998): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_START msg=audit(1765873799.708:12999): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_ACCT msg=audit(1765873799.768:13000): pid=63709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="tripleo-admin" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_CMD msg=audit(1765873799.769:13001): pid=63709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/tripleo-admin" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7572686D6565646A69696561716875617168676E676865756D68737365786A70203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765873799.769:13002): pid=63709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_START msg=audit(1765873799.771:13003): pid=63709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873799.964:13004): pid=63709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765873799.964:13005): pid=63709 uid=1002 auid=1002 ses=14 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="tripleo-admin" AUID="tripleo-admin"
type=USER_END msg=audit(1765873799.968:13006): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=USER_LOGOUT msg=audit(1765873799.968:13007): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1002 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin" ID="tripleo-admin"
type=SERVICE_START msg=audit(1765873801.523:13008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873801.526:13009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873801.529:13010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873801.689:13011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873801.765:13012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873801.769:13013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873801.782:13014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873802.299:13015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873805.521:13016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873805.524:13017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873805.528:13018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873805.700:13019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873805.723:13020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873805.799:13021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873811.520:13022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873811.523:13023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873811.526:13024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873811.653:13025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873811.683:13026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873811.742:13027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873832.521:13028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873832.524:13029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873832.527:13030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873832.530:13031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873832.664:13032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873832.745:13033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873832.817:13034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873833.099:13035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873836.519:13036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873836.522:13037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873836.525:13038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873836.682:13039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873836.746:13040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873836.897:13041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873842.518:13042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873842.521:13043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873842.523:13044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873842.703:13045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873842.714:13046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873842.725:13047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873858.552:13048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873858.552:13049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873863.523:13050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873863.526:13051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873863.528:13052): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873863.530:13053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873863.647:13054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873863.716:13055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873863.840:13056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873864.028:13057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873867.520:13058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873867.524:13059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873867.527:13060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873867.673:13061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873867.757:13062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873867.866:13063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873873.519:13064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873873.521:13065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873873.524:13066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873873.692:13067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873873.739:13068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873873.759:13069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873894.521:13070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873894.525:13071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873894.529:13072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873894.533:13073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873894.639:13074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873894.786:13075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873894.851:13076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873895.073:13077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873898.518:13078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873898.520:13079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873898.521:13080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873898.755:13081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873898.764:13082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873898.822:13083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873904.523:13084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873904.526:13085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873904.530:13086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873904.698:13087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873904.747:13088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873904.759:13089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873925.520:13090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873925.524:13091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873925.527:13092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873925.530:13093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873925.804:13094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873925.825:13095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873925.880:13096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873926.018:13097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873926.552:13098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873926.552:13099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873929.519:13100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873929.523:13101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873929.526:13102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873929.692:13103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873929.748:13104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873929.954:13105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873935.525:13106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873935.529:13107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873935.532:13108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873935.688:13109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873935.760:13110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873935.771:13111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765873944.232:13112): pid=64881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=64881 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765873944.233:13113): pid=64880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=64881 suid=74 rport=33142 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765873944.233:13114): pid=64880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=64881 suid=74 rport=33142 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765873944.275:13115): pid=64880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765873944.275:13116): pid=64880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:29:9d:95:92:cc:83:72:06:42:ed:10:a4:bb:f5:f1:c1:fd:52:87:f6:ff:80:d7:0b:00:09:15:05:9a:b6:13:82 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765873944.303:13117): pid=64880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765873944.304:13118): pid=64880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=64881 suid=74 rport=33142 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765873944.306:13119): pid=64880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765873944.306:13120): pid=64880 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=19 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765873944.306:13120): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd4ee41770 a2=4 a3=3e8 items=0 ppid=37368 pid=64880 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873944.306:13120): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765873944.308:13121): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765873944.338:13122): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873944.339:13123): pid=64883 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=64883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1765873944.341:13124): pid=64883 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765873944.386:13125): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873944.386:13126): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873944.390:13127): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=64884 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765873944.432:13128): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873944.432:13129): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765873944.446:13130): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873944.446:13131): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873944.447:13132): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=64897 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765873944.489:13133): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873944.489:13134): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765873944.504:13135): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873944.504:13136): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873944.506:13137): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=64916 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765873944.548:13138): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873944.548:13139): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765873944.561:13140): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873944.561:13141): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873944.562:13142): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=64931 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765873944.701:13143): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873944.701:13144): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765873944.722:13145): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873944.722:13146): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873944.723:13147): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=64945 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765873944.862:13148): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873944.863:13149): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765873944.877:13150): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873944.877:13151): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873944.879:13152): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=64958 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765873944.922:13153): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873944.922:13154): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765873944.939:13155): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873944.939:13156): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873944.941:13157): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=64972 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765873944.999:13158): pid=64987 uid=1000 auid=1000 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765873944.999:13159): pid=64987 uid=1000 auid=1000 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7A6E676C7662686879656D666A616D6C6867796F6A6D6A686868697A6B727765203B202F7573722F62696E2F707974686F6E33202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353837333934342E343333343033352D34303034382D3138383339383338383437303530352F416E736962616C6C5A5F73657475702E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765873945.000:13160): pid=64987 uid=1000 auid=1000 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765873945.004:13161): pid=64987 uid=1000 auid=1000 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765873947.817:13162): pid=64987 uid=1000 auid=1000 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765873947.817:13163): pid=64987 uid=1000 auid=1000 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765873947.821:13164): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873947.821:13165): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765873947.856:13166): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873947.856:13167): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873947.857:13168): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=65158 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765873947.900:13169): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873947.900:13170): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765873952.538:13171): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873952.538:13172): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873952.539:13173): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=65172 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765873952.582:13174): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873952.582:13175): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765873952.595:13176): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873952.595:13177): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873952.596:13178): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=65185 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765873952.639:13179): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873952.639:13180): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765873952.769:13181): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873952.769:13182): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873952.771:13183): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=65204 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765873952.824:13184): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873952.824:13185): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765873952.839:13186): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873952.839:13187): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873952.841:13188): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=65217 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765873952.884:13189): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873952.884:13190): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765873952.901:13191): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873952.901:13192): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873952.903:13193): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=65231 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765873953.007:13194): pid=65246 uid=1000 auid=1000 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765873953.008:13195): pid=65246 uid=1000 auid=1000 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7463656579756D7A796E7A6A627466746B71646E6E6B696B696A766C67686175203B202F7573722F62696E2F707974686F6E33202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353837333935322E353833313939332D34303133382D37363036363931313738373834342F416E736962616C6C5A5F646E662E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765873953.008:13196): pid=65246 uid=1000 auid=1000 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765873953.014:13197): pid=65246 uid=1000 auid=1000 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765873955.895:13198): pid=65246 uid=1000 auid=1000 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765873955.895:13199): pid=65246 uid=1000 auid=1000 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765873955.899:13200): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873955.899:13201): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765873955.915:13202): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873955.916:13203): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873955.917:13204): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=65251 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765873955.959:13205): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873955.959:13206): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765873956.521:13207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873956.525:13208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873956.529:13209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873956.533:13210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873956.700:13211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873956.871:13212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873956.899:13213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873957.029:13214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765873959.716:13215): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873959.716:13216): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873959.720:13217): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=65361 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765873959.763:13218): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873959.763:13219): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765873959.776:13220): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873959.776:13221): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873959.778:13222): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=65374 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765873959.820:13223): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873959.820:13224): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765873959.923:13225): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873959.923:13226): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873959.924:13227): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=65393 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765873959.973:13228): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873959.973:13229): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765873959.988:13230): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873959.988:13231): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873959.990:13232): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=65406 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765873960.156:13233): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873960.156:13234): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765873960.159:13235): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873960.159:13236): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873960.161:13237): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=65420 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765873960.219:13238): pid=65435 uid=1000 auid=1000 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765873960.219:13239): pid=65435 uid=1000 auid=1000 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D62626D637972786179636B6D736162786C766370687A7A7171636D6B7762677A203B202F7573722F62696E2F707974686F6E33202F686F6D652F7A75756C2F2E616E7369626C652F746D702F616E7369626C652D746D702D313736353837333935392E3736343030362D34303139302D3236323036393730303938333138392F416E736962616C6C5A5F69707461626C65732E7079 exe="/usr/bin/sudo" terminal=pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765873960.220:13240): pid=65435 uid=1000 auid=1000 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765873960.225:13241): pid=65435 uid=1000 auid=1000 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765873960.245:13242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873960.248:13243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873960.253:13244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873960.453:13245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1765873960.455:13246): table=filter:5 family=2 entries=1 op=nft_register_rule pid=65513 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="iptables"
type=SYSCALL msg=audit(1765873960.455:13246): arch=c000003e syscall=46 success=yes exit=768 a0=3 a1=7fff2bdbd630 a2=0 a3=7fff2bdbd61c items=0 ppid=65437 pid=65513 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=19 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765873960.455:13246): proctitle=2F7362696E2F69707461626C6573002D740066696C746572002D4900494E505554002D7000746370002D730033382E3130322E38332E313134002D6A00414343455054002D690065746830002D6D00636F6D6D656E74002D2D636F6D6D656E7400616C6C6F77207373682061636365737320666F72207A75756C206578656375
type=SERVICE_STOP msg=audit(1765873960.469:13247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765873960.470:13248): pid=65435 uid=1000 auid=1000 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765873960.473:13249): pid=65435 uid=1000 auid=1000 ses=19 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765873960.477:13250): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873960.477:13251): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGIN msg=audit(1765873960.495:13252): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765873960.495:13253): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765873960.496:13254): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=65514 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765873960.539:13255): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765873960.539:13256): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_STOP msg=audit(1765873960.546:13257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873966.532:13258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873966.537:13259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873966.541:13260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873966.679:13261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873966.743:13262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873966.799:13263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873987.520:13264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873987.524:13265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873987.527:13266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873987.530:13267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873987.690:13268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873987.748:13269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873987.803:13270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873988.124:13271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873990.518:13272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873990.521:13273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873990.610:13274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873990.693:13275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873990.753:13276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873990.922:13277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873997.521:13278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873997.524:13279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765873997.527:13280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873997.693:13281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873997.720:13282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765873997.748:13283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874018.520:13284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874018.523:13285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874018.526:13286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874018.528:13287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874018.698:13288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874018.723:13289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874018.880:13290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874019.146:13291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765874019.910:13292): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=64883 suid=1000 rport=33142 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765874019.911:13293): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=64883 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765874019.916:13294): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765874019.917:13295): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765874019.917:13296): pid=64880 uid=0 auid=1000 ses=19 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=64880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1765874021.519:13297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874021.523:13298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874021.527:13299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874021.752:13300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874021.834:13301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874021.849:13302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874028.532:13303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874028.536:13304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874028.539:13305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874028.717:13306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874028.742:13307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874028.770:13308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765874032.658:13309): pid=66072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=66072 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765874032.660:13310): pid=66071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=66072 suid=74 rport=46900 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765874032.660:13311): pid=66071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=66072 suid=74 rport=46900 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765874032.745:13312): pid=66071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765874032.756:13313): pid=66071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765874032.756:13314): pid=66071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:29:9d:95:92:cc:83:72:06:42:ed:10:a4:bb:f5:f1:c1:fd:52:87:f6:ff:80:d7:0b:00:09:15:05:9a:b6:13:82 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765874032.783:13315): pid=66071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765874032.784:13316): pid=66071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=66072 suid=74 rport=46900 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765874032.786:13317): pid=66071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765874032.786:13318): pid=66071 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=20 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765874032.786:13318): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc8cb8b100 a2=4 a3=3e8 items=0 ppid=37368 pid=66071 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765874032.786:13318): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765874032.788:13319): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765874032.819:13320): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765874032.820:13321): pid=66075 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=66075 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1765874032.822:13322): pid=66075 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765874032.865:13323): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765874032.865:13324): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765874032.867:13325): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=66076 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765874032.931:13326): pid=66089 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765874032.932:13327): pid=66089 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D686E7A716B6E687569637A6D6A6873796667706B6D6E73706E61777661707375203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765874032.934:13328): pid=66089 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765874032.939:13329): pid=66089 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765874035.724:13330): pid=66089 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765874035.725:13331): pid=66089 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765874035.729:13332): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765874035.729:13333): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765874048.555:13334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874048.555:13335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874049.521:13336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874049.525:13337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874049.528:13338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874049.530:13339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874049.694:13340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874049.828:13341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874049.853:13342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874050.035:13343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874052.521:13344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874052.524:13345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874052.527:13346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874052.733:13347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874052.797:13348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874052.925:13349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874059.519:13350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874059.522:13351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874059.525:13352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874059.667:13353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874059.769:13354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874059.783:13355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765874060.564:13356): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765874060.564:13357): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765874060.567:13358): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=66326 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765874060.633:13359): pid=66339 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765874060.633:13360): pid=66339 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6376766D716378636A686D746D66766C796B756A7863636C6B707879756D7A6E203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765874060.634:13361): pid=66339 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765874060.639:13362): pid=66339 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1765874064.513:13363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r66d4ea19982b467ab791463876a14610 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874064.543:13364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r7e1b278985564b93970ee275f6fdfe40 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SOFTWARE_UPDATE msg=audit(1765874064.546:13365): pid=66341 uid=0 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=update sw="sos-4.8.2-2.el9_2.noarch" sw_type=rpm key_enforce=0 gpg_res=1 root_dir="/" comm="python3" exe="/usr/bin/python3.9" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1765874064.929:13366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874064.929:13367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=man-db-cache-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874064.931:13368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r7e1b278985564b93970ee275f6fdfe40 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874064.935:13369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=run-r66d4ea19982b467ab791463876a14610 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765874065.451:13370): pid=66339 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765874065.451:13371): pid=66339 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765874065.456:13372): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765874065.456:13373): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765874080.525:13374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874080.528:13375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874080.531:13376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874080.534:13377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874080.731:13378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874080.810:13379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874080.859:13380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874081.047:13381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874083.521:13382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874083.524:13383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874083.528:13384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874083.740:13385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874083.811:13386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874083.893:13387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765874089.343:13388): pid=66668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=66668 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765874089.450:13389): pid=66667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=66668 suid=74 rport=45736 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.244 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765874089.451:13390): pid=66667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=66668 suid=74 rport=45736 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.244 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765874090.114:13391): pid=66667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.244 addr=193.46.255.244 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874090.521:13392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874090.524:13393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874090.526:13394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874090.638:13395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874090.731:13396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874090.757:13397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765874093.477:13398): pid=66667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.244 addr=193.46.255.244 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765874096.843:13399): pid=66667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.244 addr=193.46.255.244 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765874098.557:13400): pid=66667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=66668 suid=74 rport=45736 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.244 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765874098.557:13401): pid=66667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=66668 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765874098.559:13402): pid=66667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=66667 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765874098.559:13403): pid=66667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.244 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765874098.680:13404): pid=66738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=66738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765874098.787:13405): pid=66737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=66738 suid=74 rport=24688 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.244 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765874098.788:13406): pid=66737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=66738 suid=74 rport=24688 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.244 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765874099.448:13407): pid=66737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.244 addr=193.46.255.244 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765874102.806:13408): pid=66737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.244 addr=193.46.255.244 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1765874104.809:13409): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765874104.809:13410): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765874104.811:13411): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=66741 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765874104.873:13412): pid=66754 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765874104.874:13413): pid=66754 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D72626F766661796F64756161676970697669796678626572687A6E7871686F74203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765874104.875:13414): pid=66754 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765874104.880:13415): pid=66754 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765874106.159:13416): pid=66737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=66738 suid=74 rport=24688 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.244 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765874106.159:13417): pid=66737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=66738 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765874106.161:13418): pid=66737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=66737 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765874106.161:13419): pid=66737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.244 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874111.528:13420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874111.532:13421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874111.534:13422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874111.536:13423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874111.769:13424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874111.779:13425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874111.810:13426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874111.979:13427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1765874112.308:13428): pid=66754 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765874112.308:13429): pid=66754 uid=1000 auid=1000 ses=20 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765874112.314:13430): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765874112.314:13431): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1765874114.519:13432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874114.522:13433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874114.525:13434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874114.729:13435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874114.814:13436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874114.841:13437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874121.528:13438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874121.531:13439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874121.535:13440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874121.719:13441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874121.769:13442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874121.875:13443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765874133.724:13444): pid=67187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=67187 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765874133.827:13445): pid=67186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=67187 suid=74 rport=28442 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765874133.828:13446): pid=67186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=67187 suid=74 rport=28442 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1765874134.390:13447): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765874134.391:13448): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765874134.392:13449): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=67188 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_AUTH msg=audit(1765874134.461:13450): pid=67186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.20 addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1765874134.592:13451): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765874134.592:13452): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_AUTH msg=audit(1765874137.849:13453): pid=67186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.20 addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765874141.210:13454): pid=67186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.20 addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874142.521:13455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874142.524:13456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874142.527:13457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874142.531:13458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874142.744:13459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874142.810:13460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874142.861:13461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874143.040:13462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765874144.551:13463): pid=67186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=67187 suid=74 rport=28442 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765874144.552:13464): pid=67186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=67187 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765874144.553:13465): pid=67186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=67186 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765874144.553:13466): pid=67186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765874144.684:13467): pid=67296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=67296 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765874144.791:13468): pid=67295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=67296 suid=74 rport=12204 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765874144.791:13469): pid=67295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=67296 suid=74 rport=12204 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765874145.450:13470): pid=67295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.20 addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874145.519:13471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874145.522:13472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874145.525:13473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874145.761:13474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874145.797:13475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874145.954:13476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765874148.818:13477): pid=67295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.20 addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765874152.190:13478): pid=67295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.20 addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874152.527:13479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874152.530:13480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874152.533:13481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874152.565:13482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874152.565:13483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874152.675:13484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874152.717:13485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874152.811:13486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765874155.528:13487): pid=67295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=67296 suid=74 rport=12204 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765874155.529:13488): pid=67295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=67296 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765874155.530:13489): pid=67295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=67295 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765874155.530:13490): pid=67295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765874155.662:13491): pid=67444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=67444 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765874155.769:13492): pid=67443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=67444 suid=74 rport=20446 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765874155.770:13493): pid=67443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=67444 suid=74 rport=20446 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765874156.433:13494): pid=67443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.20 addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765874159.800:13495): pid=67443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.20 addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765874163.167:13496): pid=67443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.20 addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765874166.512:13497): pid=67443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=67444 suid=74 rport=20446 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765874166.512:13498): pid=67443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=67444 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765874166.513:13499): pid=67443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=67443 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765874166.513:13500): pid=67443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874173.522:13501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874173.525:13502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874173.528:13503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874173.532:13504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874173.691:13505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874173.741:13506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874173.828:13507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874174.130:13508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874176.519:13509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874176.522:13510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874176.525:13511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874176.662:13512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874176.748:13513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874176.879:13514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874183.520:13515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874183.524:13516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874183.527:13517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874183.680:13518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874183.810:13519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874183.820:13520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765874194.653:13521): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=66075 suid=1000 rport=46900 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765874194.654:13522): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=66075 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765874194.660:13523): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765874194.661:13524): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765874194.662:13525): pid=66071 uid=0 auid=1000 ses=20 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=66071 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1765874204.523:13526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874204.527:13527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874204.531:13528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874204.534:13529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874204.762:13530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874204.784:13531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874204.801:13532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874205.007:13533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874207.519:13534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874207.522:13535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874207.526:13536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874207.729:13537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874207.761:13538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874207.866:13539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874214.520:13540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874214.523:13541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874214.525:13542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874214.666:13543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874214.732:13544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874214.819:13545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874235.529:13546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874235.534:13547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874235.538:13548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874235.540:13549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874235.679:13550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874235.850:13551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874235.946:13552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874236.177:13553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874238.519:13554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874238.522:13555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874238.527:13556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874238.754:13557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874238.766:13558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874238.954:13559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874245.524:13560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874245.527:13561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874245.530:13562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874245.681:13563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874245.756:13564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874245.810:13565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874266.521:13566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874266.524:13567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874266.528:13568): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874266.531:13569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874266.648:13570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874266.743:13571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874266.829:13572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874267.098:13573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874269.519:13574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874269.521:13575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874269.523:13576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874269.678:13577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874269.763:13578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874269.885:13579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874276.520:13580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874276.523:13581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874276.525:13582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874276.567:13583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874276.567:13584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874276.689:13585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874276.743:13586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874276.845:13587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874297.524:13588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874297.527:13589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874297.530:13590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874297.533:13591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874297.736:13592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874298.038:13593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874298.063:13594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874298.312:13595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874300.524:13596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874300.527:13597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874300.531:13598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874300.698:13599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874300.751:13600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874300.911:13601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874307.518:13602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874307.520:13603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874307.523:13604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874307.621:13605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874307.666:13606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874307.739:13607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874328.523:13608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874328.527:13609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874328.530:13610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874328.533:13611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874328.684:13612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874328.706:13613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874328.733:13614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874329.151:13615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874331.520:13616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874331.524:13617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874331.526:13618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874331.694:13619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874331.721:13620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874331.975:13621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874338.519:13622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874338.523:13623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874338.526:13624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874338.673:13625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874338.691:13626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874338.760:13627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874359.524:13628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874359.527:13629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874359.531:13630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874359.534:13631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874359.693:13632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874359.701:13633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874359.836:13634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874360.165:13635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874362.519:13636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874362.523:13637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874362.526:13638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874362.665:13639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874362.719:13640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874362.900:13641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874369.519:13642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874369.522:13643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874369.525:13644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874369.714:13645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874369.750:13646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874369.805:13647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874388.549:13648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874388.549:13649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874390.533:13650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874390.537:13651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874390.540:13652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874390.543:13653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874390.776:13654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874390.790:13655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874390.895:13656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874391.169:13657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874393.529:13658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874393.532:13659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874393.535:13660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874393.730:13661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874393.774:13662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874393.845:13663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874400.531:13664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874400.534:13665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874400.538:13666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874400.708:13667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874400.747:13668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874400.760:13669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874421.523:13670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874421.526:13671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874421.530:13672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874421.535:13673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874421.707:13674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874421.720:13675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874421.823:13676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874422.091:13677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874424.519:13678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874424.522:13679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874424.525:13680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874424.674:13681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874424.763:13682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874424.948:13683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874431.526:13684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874431.529:13685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874431.533:13686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874431.664:13687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874431.702:13688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874431.712:13689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874452.521:13690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874452.525:13691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874452.529:13692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874452.533:13693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874452.706:13694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874452.751:13695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874452.791:13696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874453.017:13697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874455.527:13698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874455.531:13699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874455.534:13700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874455.669:13701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874455.794:13702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874455.860:13703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874462.518:13704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874462.520:13705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874462.522:13706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874462.680:13707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874462.764:13708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874462.814:13709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874483.526:13710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874483.529:13711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874483.532:13712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874483.535:13713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874483.569:13714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874483.569:13715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874483.703:13716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874483.775:13717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874483.882:13718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874483.998:13719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874486.519:13720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874486.522:13721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874486.525:13722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874486.681:13723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874486.718:13724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874486.784:13725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874493.520:13726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874493.523:13727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874493.526:13728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874493.608:13729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874493.661:13730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874493.717:13731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874514.529:13732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874514.532:13733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874514.535:13734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874514.539:13735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874514.689:13736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874514.753:13737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874514.805:13738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874515.172:13739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874517.519:13740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874517.522:13741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874517.525:13742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874517.662:13743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874517.762:13744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874517.871:13745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874524.523:13746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874524.526:13747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874524.529:13748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874524.648:13749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874524.818:13750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874524.870:13751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874545.526:13752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874545.529:13753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874545.532:13754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874545.535:13755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874545.749:13756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874545.756:13757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874545.769:13758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874546.029:13759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874548.520:13760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874548.523:13761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874548.526:13762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874548.766:13763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874548.815:13764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874548.939:13765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874555.523:13766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874555.527:13767): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874555.530:13768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874555.635:13769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874555.701:13770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874555.789:13771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874576.523:13772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874576.525:13773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874576.526:13774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874576.528:13775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874576.683:13776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874576.738:13777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874576.805:13778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874577.008:13779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874579.525:13780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874579.529:13781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874579.533:13782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874579.689:13783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874579.708:13784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874580.001:13785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874580.550:13786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874580.550:13787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874586.519:13788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874586.521:13789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874586.524:13790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874586.658:13791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874586.684:13792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874586.761:13793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874607.518:13794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874607.521:13795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874607.524:13796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874607.527:13797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874607.717:13798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874607.800:13799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874607.811:13800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874607.998:13801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874610.524:13802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874610.527:13803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874610.530:13804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874610.673:13805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874610.772:13806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874610.839:13807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874617.522:13808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874617.525:13809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874617.528:13810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874617.662:13811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874617.684:13812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874617.737:13813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874638.520:13814): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874638.522:13815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874638.523:13816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874638.525:13817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874638.748:13818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874638.799:13819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874638.819:13820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874638.986:13821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874641.519:13822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874641.523:13823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874641.526:13824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874641.744:13825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874641.758:13826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874641.824:13827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874648.518:13828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874648.520:13829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874648.523:13830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874648.641:13831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874648.669:13832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874648.756:13833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874658.547:13834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874658.547:13835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874669.521:13836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874669.524:13837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874669.527:13838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874669.530:13839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874669.756:13840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874669.822:13841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874669.873:13842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874669.986:13843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874672.519:13844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874672.523:13845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874672.526:13846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874672.737:13847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874672.817:13848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874672.834:13849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874679.519:13850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874679.523:13851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874679.526:13852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874679.667:13853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874679.766:13854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874679.786:13855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874700.520:13856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874700.524:13857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874700.528:13858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874700.532:13859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874700.680:13860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874700.820:13861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874700.851:13862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874701.201:13863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874703.526:13864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874703.529:13865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874703.533:13866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874703.765:13867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874703.823:13868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874703.932:13869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874710.523:13870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874710.526:13871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874710.530:13872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874710.665:13873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874710.694:13874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874710.764:13875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874728.553:13876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874728.553:13877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874731.522:13878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874731.525:13879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874731.529:13880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874731.532:13881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874731.663:13882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874731.790:13883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874731.872:13884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874732.083:13885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874734.521:13886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874734.524:13887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874734.528:13888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874734.666:13889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874734.734:13890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874734.935:13891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874741.518:13892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874741.521:13893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874741.524:13894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874741.714:13895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874741.736:13896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874741.743:13897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874762.519:13898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874762.522:13899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874762.525:13900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874762.528:13901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874762.749:13902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874762.789:13903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874762.856:13904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874763.005:13905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874765.520:13906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874765.524:13907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874765.528:13908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874765.687:13909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874765.729:13910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874765.896:13911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874772.518:13912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874772.520:13913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874772.521:13914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874772.625:13915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874772.781:13916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874772.800:13917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874793.521:13918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874793.524:13919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874793.528:13920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874793.535:13921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874793.633:13922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874793.838:13923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874793.860:13924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874794.060:13925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874796.520:13926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874796.524:13927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874796.527:13928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874796.685:13929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874796.799:13930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874796.834:13931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874803.520:13932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874803.524:13933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874803.527:13934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874803.617:13935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874803.678:13936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874803.757:13937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874824.531:13938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874824.534:13939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874824.538:13940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874824.541:13941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874824.640:13942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874824.820:13943): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874824.833:13944): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874825.127:13945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874827.524:13946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874827.527:13947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874827.531:13948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874827.689:13949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874827.789:13950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874827.891:13951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874834.521:13952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874834.525:13953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874834.527:13954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874834.639:13955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874834.753:13956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874834.763:13957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874848.546:13958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874848.546:13959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874855.521:13960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874855.524:13961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874855.526:13962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874855.529:13963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874855.719:13964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874855.766:13965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874855.776:13966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874855.999:13967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874858.518:13968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874858.519:13969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874858.521:13970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874858.669:13971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874858.790:13972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874858.863:13973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874865.519:13974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874865.523:13975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874865.526:13976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874865.670:13977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874865.683:13978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874865.697:13979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874886.527:13980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874886.530:13981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874886.532:13982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874886.535:13983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874886.736:13984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874886.756:13985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874886.864:13986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874887.017:13987): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874889.520:13988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874889.522:13989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874889.526:13990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874889.731:13991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874889.761:13992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874889.839:13993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874896.529:13994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874896.533:13995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874896.537:13996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874896.691:13997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874896.765:13998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874896.782:13999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874917.520:14000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874917.523:14001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874917.526:14002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874917.529:14003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874917.679:14004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874917.753:14005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874917.798:14006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874917.979:14007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874920.521:14008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874920.524:14009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874920.527:14010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874920.561:14011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874920.561:14012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874920.684:14013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874920.759:14014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874920.917:14015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874927.520:14016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874927.524:14017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874927.527:14018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874927.672:14019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874927.753:14020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874927.762:14021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874948.526:14022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874948.530:14023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874948.533:14024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874948.536:14025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874948.642:14026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874948.741:14027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874948.806:14028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874949.170:14029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874951.527:14030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874951.531:14031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874951.534:14032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874951.670:14033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874951.693:14034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874951.965:14035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874958.520:14036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874958.523:14037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874958.527:14038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874958.644:14039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874958.742:14040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874958.756:14041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874979.521:14042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874979.524:14043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874979.527:14044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874979.530:14045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874979.674:14046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874979.744:14047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874979.853:14048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874980.062:14049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874982.519:14050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874982.522:14051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874982.525:14052): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874982.740:14053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874982.759:14054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874982.821:14055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874989.519:14056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874989.521:14057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765874989.523:14058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874989.679:14059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874989.766:14060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765874989.816:14061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875008.549:14062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875008.549:14063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875010.521:14064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875010.524:14065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875010.527:14066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875010.530:14067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875010.718:14068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875010.742:14069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875010.748:14070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875011.053:14071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875013.521:14072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875013.525:14073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875013.529:14074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875013.672:14075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875013.736:14076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875013.940:14077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875020.519:14078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875020.523:14079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875020.526:14080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875020.737:14081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875020.759:14082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875020.795:14083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875041.525:14084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875041.528:14085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875041.531:14086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875041.534:14087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875041.684:14088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875041.733:14089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875041.820:14090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875041.950:14091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875044.520:14092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875044.523:14093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875044.527:14094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875044.715:14095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875044.760:14096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875044.824:14097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875051.519:14098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875051.522:14099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875051.525:14100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875051.693:14101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875051.706:14102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875051.808:14103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765875069.587:14104): pid=74279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=74279 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765875069.694:14105): pid=74278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=74279 suid=74 rport=15116 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.159 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765875069.695:14106): pid=74278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=74279 suid=74 rport=15116 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.159 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765875070.359:14107): pid=74278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.159 addr=193.46.255.159 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875072.524:14108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875072.526:14109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875072.528:14110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875072.530:14111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875072.715:14112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875072.800:14113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875072.849:14114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875073.139:14115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765875073.721:14116): pid=74278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.159 addr=193.46.255.159 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765875075.459:14117): pid=74278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.159 addr=193.46.255.159 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875075.521:14118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875075.524:14119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875075.526:14120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875075.728:14121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875075.814:14122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875075.872:14123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765875078.804:14124): pid=74278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=74279 suid=74 rport=15116 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.159 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765875078.804:14125): pid=74278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=74279 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765875078.806:14126): pid=74278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=74278 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765875078.806:14127): pid=74278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.159 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765875078.923:14128): pid=74447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=74447 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765875079.026:14129): pid=74446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=74447 suid=74 rport=31592 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.159 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765875079.026:14130): pid=74446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=74447 suid=74 rport=31592 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.159 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765875079.663:14131): pid=74446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.159 addr=193.46.255.159 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875082.526:14132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875082.529:14133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875082.532:14134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875082.692:14135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875082.706:14136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875082.740:14137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765875083.026:14138): pid=74446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.159 addr=193.46.255.159 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765875084.760:14139): pid=74446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.159 addr=193.46.255.159 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765875088.101:14140): pid=74446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=74447 suid=74 rport=31592 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.159 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765875088.101:14141): pid=74446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=74447 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765875088.102:14142): pid=74446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=74446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765875088.103:14143): pid=74446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.159 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875103.523:14144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875103.526:14145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875103.529:14146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875103.532:14147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875103.638:14148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875103.720:14149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875103.822:14150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875104.131:14151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875106.527:14152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875106.530:14153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875106.533:14154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875106.667:14155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875106.697:14156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875106.992:14157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875108.559:14158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875108.559:14159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875113.523:14160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875113.526:14161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875113.529:14162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875113.631:14163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875113.700:14164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875113.713:14165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875134.524:14166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875134.527:14167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875134.530:14168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875134.533:14169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875134.721:14170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875134.771:14171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875134.866:14172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875135.145:14173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875137.521:14174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875137.525:14175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875137.531:14176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875137.761:14177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875137.814:14178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875137.964:14179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875144.518:14180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875144.522:14181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875144.525:14182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875144.670:14183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875144.716:14184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875144.846:14185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875165.520:14186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875165.523:14187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875165.526:14188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875165.529:14189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875165.677:14190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875165.756:14191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875165.770:14192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875166.092:14193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875168.519:14194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875168.522:14195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875168.525:14196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875168.633:14197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875168.681:14198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875168.977:14199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875175.518:14200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875175.520:14201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875175.522:14202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875175.741:14203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875175.765:14204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875175.795:14205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875196.527:14206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875196.530:14207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875196.533:14208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875196.536:14209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875196.634:14210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875196.740:14211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875196.895:14212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875197.139:14213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875199.519:14214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875199.522:14215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875199.525:14216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875199.721:14217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875199.738:14218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875199.825:14219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875206.519:14220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875206.522:14221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875206.525:14222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875206.639:14223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875206.703:14224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875206.829:14225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875207.547:14226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875207.547:14227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875227.526:14228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875227.529:14229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875227.533:14230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875227.537:14231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875227.677:14232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875227.826:14233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875227.857:14234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875228.091:14235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875230.523:14236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875230.526:14237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875230.530:14238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875230.622:14239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875230.735:14240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875230.753:14241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875237.520:14242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875237.523:14243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875237.526:14244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875237.688:14245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875237.739:14246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875237.757:14247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765875241.815:14248): pid=75656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=75656 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765875241.917:14249): pid=75655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=75656 suid=74 rport=59244 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765875241.918:14250): pid=75655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=75656 suid=74 rport=59244 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765875242.563:14251): pid=75655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.99 addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765875245.918:14252): pid=75655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.99 addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765875249.284:14253): pid=75655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.99 addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765875252.633:14254): pid=75655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=75656 suid=74 rport=59244 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765875252.633:14255): pid=75655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=75656 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765875252.635:14256): pid=75655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=75655 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765875252.635:14257): pid=75655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765875252.757:14258): pid=75661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=75661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765875252.860:14259): pid=75660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=75661 suid=74 rport=49508 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765875252.860:14260): pid=75660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=75661 suid=74 rport=49508 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765875253.499:14261): pid=75660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.99 addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765875256.855:14262): pid=75660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.99 addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875258.528:14263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875258.532:14264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875258.535:14265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875258.538:14266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875258.768:14267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875258.800:14268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875258.867:14269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875259.027:14270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765875260.231:14271): pid=75660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.99 addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875261.520:14272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875261.522:14273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875261.526:14274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875261.751:14275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875261.763:14276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875261.852:14277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765875263.567:14278): pid=75660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=75661 suid=74 rport=49508 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765875263.568:14279): pid=75660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=75661 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765875263.569:14280): pid=75660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=75660 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765875263.569:14281): pid=75660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765875263.699:14282): pid=75827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=75827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765875263.806:14283): pid=75826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=75827 suid=74 rport=33508 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765875263.807:14284): pid=75826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=75827 suid=74 rport=33508 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765875264.467:14285): pid=75826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.99 addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765875267.834:14286): pid=75826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.99 addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875268.519:14287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875268.523:14288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875268.526:14289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875268.672:14290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875268.695:14291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875268.812:14292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765875271.194:14293): pid=75826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.99 addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765875274.546:14294): pid=75826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=75827 suid=74 rport=33508 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765875274.546:14295): pid=75826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=75827 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765875274.548:14296): pid=75826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=75826 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765875274.548:14297): pid=75826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.99 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875289.522:14298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875289.525:14299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875289.530:14300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875289.534:14301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875289.722:14302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875289.817:14303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875289.848:14304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875290.045:14305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875292.518:14306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875292.519:14307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875292.521:14308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875292.664:14309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875292.746:14310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875292.897:14311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875299.524:14312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875299.527:14313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875299.530:14314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875299.640:14315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875299.718:14316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875299.759:14317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875317.692:14318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875317.692:14319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875320.520:14320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875320.525:14321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875320.528:14322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875320.531:14323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875320.722:14324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875320.737:14325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875320.799:14326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875321.161:14327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875323.527:14328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875323.531:14329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875323.534:14330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875323.697:14331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875323.840:14332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875323.857:14333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875330.518:14334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875330.520:14335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875330.521:14336): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875330.670:14337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875330.688:14338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875330.772:14339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875351.520:14340): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875351.524:14341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875351.527:14342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875351.530:14343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875351.701:14344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875351.842:14345): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875351.885:14346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875352.064:14347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875354.519:14348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875354.523:14349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875354.526:14350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875354.663:14351): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875354.708:14352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875354.896:14353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875361.519:14354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875361.522:14355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875361.525:14356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875361.609:14357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875361.739:14358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875361.757:14359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875382.526:14360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875382.529:14361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875382.532:14362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875382.536:14363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875382.699:14364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875382.818:14365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875382.870:14366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875383.193:14367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875385.531:14368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875385.535:14369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875385.539:14370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875385.642:14371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875385.733:14372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875385.961:14373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875392.519:14374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875392.522:14375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875392.525:14376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875392.658:14377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875392.746:14378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875392.767:14379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875392.796:14380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875392.796:14381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875413.524:14382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875413.528:14383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875413.531:14384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875413.534:14385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875413.675:14386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875413.736:14387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875413.828:14388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875414.072:14389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875416.519:14390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875416.523:14391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875416.525:14392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875416.638:14393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875416.824:14394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875416.993:14395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875423.525:14396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875423.529:14397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875423.532:14398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875423.734:14399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875423.767:14400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875423.816:14401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875444.523:14402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875444.526:14403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875444.527:14404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875444.529:14405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875444.663:14406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875444.765:14407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875444.799:14408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875445.041:14409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875447.519:14410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875447.522:14411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875447.525:14412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875447.663:14413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875447.742:14414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875447.905:14415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875454.520:14416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875454.523:14417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875454.526:14418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875454.645:14419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875454.731:14420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875454.792:14421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875475.520:14422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875475.523:14423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875475.526:14424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875475.528:14425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875475.630:14426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875475.728:14427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875475.815:14428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875476.160:14429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875478.527:14430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875478.530:14431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875478.533:14432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875478.677:14433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875478.766:14434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875478.913:14435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875485.523:14436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875485.526:14437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875485.529:14438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875485.672:14439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875485.729:14440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875485.795:14441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875506.526:14442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875506.530:14443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875506.534:14444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875506.538:14445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875506.564:14446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875506.564:14447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875506.670:14448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875506.745:14449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875506.804:14450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875507.028:14451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875509.521:14452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875509.524:14453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875509.527:14454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875509.640:14455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875509.767:14456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875510.000:14457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875516.522:14458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875516.525:14459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875516.528:14460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875516.637:14461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875516.769:14462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875516.812:14463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875537.520:14464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875537.523:14465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875537.526:14466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875537.529:14467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875537.638:14468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875537.833:14469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875537.845:14470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875538.097:14471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875540.522:14472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875540.525:14473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875540.527:14474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875540.729:14475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875540.815:14476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875540.867:14477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875547.523:14478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875547.526:14479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875547.528:14480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875547.661:14481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875547.727:14482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875547.813:14483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875568.527:14484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875568.530:14485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875568.532:14486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875568.535:14487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875568.668:14488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875568.718:14489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765875568.779:14490): pid=78020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=78020 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1765875568.886:14491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1765875568.887:14492): pid=78016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=78020 suid=74 rport=55022 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=139.19.117.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765875568.887:14493): pid=78016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=78020 suid=74 rport=55022 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=139.19.117.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1765875569.118:14494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765875569.280:14495): pid=78016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=139.19.117.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765875569.443:14496): pid=78016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="admin" exe="/usr/sbin/sshd" hostname=? addr=139.19.117.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875571.520:14497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875571.522:14498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875571.525:14499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875571.646:14500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875571.802:14501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875571.987:14502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875578.520:14503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875578.524:14504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875578.528:14505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875578.662:14506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875578.746:14507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875578.754:14508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765875578.763:14509): pid=78016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=78020 suid=74 rport=55022 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=139.19.117.130 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765875578.764:14510): pid=78016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=78020 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1765875578.764:14511): pid=78016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=139.19.117.130 addr=139.19.117.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765875578.765:14512): pid=78016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=78016 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765875578.765:14513): pid=78016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=139.19.117.130 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875599.519:14514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875599.521:14515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875599.523:14516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875599.525:14517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875599.675:14518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875599.741:14519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875599.797:14520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875599.981:14521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765875600.694:14522): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26224 suid=1002 rport=45942 laddr=192.168.122.107 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1765875600.700:14523): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1765875600.701:14524): pid=26204 uid=0 auid=1002 ses=14 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=USER_ACCT msg=audit(1765875601.568:14525): pid=78261 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=CRED_ACQ msg=audit(1765875601.569:14526): pid=78261 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1765875601.570:14527): pid=78261 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1765875601.570:14528): pid=78261 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765875602.545:14529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875602.549:14530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875602.552:14531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875602.734:14532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875602.823:14533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875602.874:14534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875608.565:14535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875608.565:14536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875609.526:14537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875609.528:14538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875609.530:14539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875609.627:14540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875609.764:14541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875609.788:14542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875610.766:14543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875610.801:14544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875630.524:14545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875630.527:14546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875630.530:14547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875630.533:14548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875630.680:14549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875630.841:14550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875630.862:14551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875631.083:14552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875633.523:14553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875633.526:14554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875633.528:14555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875633.672:14556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875633.807:14557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875633.939:14558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875640.529:14559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875640.533:14560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875640.536:14561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875640.697:14562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875640.779:14563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875640.832:14564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875661.519:14565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875661.521:14566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875661.522:14567): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875661.524:14568): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875661.731:14569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875661.765:14570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875661.783:14571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875661.970:14572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875664.520:14573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875664.523:14574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875664.527:14575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875664.707:14576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875664.732:14577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875665.007:14578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875671.519:14579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875671.523:14580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875671.526:14581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875671.750:14582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875671.757:14583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875671.800:14584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875678.551:14585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875678.551:14586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1765875682.596:14587): pid=78261 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1765875682.597:14588): pid=78261 uid=0 auid=1002 ses=14 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1765875692.524:14589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875692.527:14590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875692.531:14591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875692.534:14592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875692.751:14593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875692.769:14594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875692.873:14595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875693.132:14596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875695.519:14597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875695.522:14598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875695.526:14599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875695.665:14600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875695.695:14601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875695.984:14602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875702.519:14603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875702.522:14604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875702.525:14605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875702.654:14606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875702.736:14607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875702.755:14608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875723.518:14609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875723.520:14610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875723.521:14611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875723.523:14612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875723.624:14613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875723.735:14614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875723.863:14615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875724.102:14616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875726.519:14617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875726.522:14618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875726.525:14619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875726.637:14620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875726.796:14621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875726.953:14622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875733.519:14623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875733.523:14624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875733.525:14625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875733.661:14626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875733.748:14627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875733.756:14628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875754.520:14629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875754.524:14630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875754.527:14631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875754.531:14632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875754.640:14633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875754.815:14634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875754.843:14635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875755.089:14636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875757.528:14637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875757.531:14638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875757.533:14639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875758.328:14640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875758.427:14641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875758.630:14642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875764.518:14643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875764.520:14644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875764.523:14645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875764.615:14646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875764.690:14647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875764.793:14648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875778.545:14649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875778.545:14650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875785.527:14651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875785.530:14652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875785.533:14653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875785.537:14654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875785.675:14655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875785.824:14656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875785.863:14657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875786.126:14658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875788.518:14659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875788.520:14660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875788.664:14661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875788.667:14662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875788.721:14663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875788.995:14664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875795.521:14665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875795.524:14666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875795.526:14667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875795.634:14668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875795.686:14669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875795.815:14670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875816.526:14671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875816.530:14672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875816.533:14673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875816.536:14674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875816.651:14675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875816.747:14676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875816.797:14677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875817.291:14678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875819.523:14679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875819.527:14680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875819.530:14681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875819.718:14682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875819.753:14683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875819.811:14684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875826.527:14685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875826.530:14686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875826.533:14687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875826.675:14688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875826.765:14689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875826.821:14690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875847.521:14691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875847.524:14692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875847.527:14693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875847.530:14694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875847.637:14695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875847.757:14696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875847.863:14697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875848.113:14698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875850.519:14699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875850.522:14700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875850.525:14701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875850.689:14702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875850.743:14703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875850.849:14704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875857.520:14705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875857.523:14706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875857.526:14707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875857.715:14708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875857.732:14709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875857.789:14710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875878.522:14711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875878.525:14712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875878.528:14713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875878.531:14714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875878.659:14715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875878.806:14716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875878.863:14717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875879.027:14718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875881.524:14719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875881.527:14720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875881.530:14721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875881.672:14722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875881.744:14723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875881.946:14724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875888.520:14725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875888.523:14726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875888.527:14727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875888.554:14728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875888.554:14729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875888.660:14730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875888.680:14731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875888.787:14732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875909.521:14733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875909.524:14734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875909.528:14735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875909.532:14736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875909.711:14737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875909.738:14738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875909.830:14739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875909.998:14740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875912.519:14741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875912.522:14742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875912.525:14743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875912.673:14744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875912.728:14745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875912.870:14746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875919.519:14747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875919.522:14748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875919.524:14749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875919.720:14750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875919.749:14751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875919.780:14752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875940.527:14753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875940.530:14754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875940.533:14755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875940.538:14756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875940.576:14757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875940.576:14758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875940.750:14759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875940.837:14760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875940.893:14761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875941.058:14762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875943.519:14763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875943.522:14764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875943.525:14765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875943.704:14766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875943.803:14767): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875943.930:14768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875950.521:14769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875950.524:14770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875950.527:14771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875950.640:14772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875950.764:14773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875950.852:14774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875971.520:14775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875971.523:14776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875971.525:14777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875971.528:14778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875971.665:14779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875971.719:14780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875971.772:14781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875972.136:14782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875974.519:14783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875974.523:14784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875974.527:14785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875974.733:14786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875974.796:14787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875974.830:14788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875981.518:14789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875981.520:14790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765875981.522:14791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875981.633:14792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875981.740:14793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765875981.851:14794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876002.518:14795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876002.521:14796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876002.523:14797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876002.525:14798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876002.686:14799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876002.715:14800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876002.800:14801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876002.994:14802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876005.522:14803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876005.525:14804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876005.529:14805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876005.689:14806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876005.756:14807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876005.839:14808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876012.523:14809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876012.526:14810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876012.530:14811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876012.640:14812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876012.745:14813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876012.801:14814): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876033.521:14815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876033.524:14816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876033.527:14817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876033.530:14818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876033.666:14819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876033.731:14820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876033.822:14821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876034.077:14822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876036.519:14823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876036.522:14824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876036.525:14825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876036.722:14826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876036.779:14827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876036.877:14828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876043.523:14829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876043.526:14830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876043.529:14831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876043.699:14832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876043.783:14833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876043.804:14834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876058.553:14835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876058.553:14836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876064.521:14837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876064.524:14838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876064.527:14839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876064.531:14840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876064.676:14841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876064.820:14842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876064.837:14843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876065.033:14844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876067.519:14845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876067.522:14846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876067.525:14847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876067.635:14848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876067.727:14849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876067.986:14850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876074.519:14851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876074.523:14852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876074.525:14853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876074.670:14854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876074.706:14855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876074.758:14856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876095.518:14857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876095.519:14858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876095.521:14859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876095.522:14860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876095.685:14861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876095.783:14862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876095.792:14863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876096.043:14864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876098.523:14865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876098.526:14866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876098.529:14867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876098.739:14868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876098.814:14869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876098.827:14870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876105.523:14871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876105.526:14872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876105.529:14873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876105.632:14874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876105.723:14875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876105.795:14876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876126.519:14877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876126.521:14878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876126.524:14879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876126.526:14880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876126.670:14881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876126.803:14882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876126.853:14883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876127.153:14884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876129.521:14885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876129.525:14886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876129.528:14887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876129.692:14888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876129.731:14889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876129.951:14890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876136.519:14891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876136.522:14892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876136.525:14893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876136.665:14894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876136.693:14895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876136.795:14896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765876151.887:14897): pid=82307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=82307 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765876151.994:14898): pid=82306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=82307 suid=74 rport=36138 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765876151.994:14899): pid=82306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=82307 suid=74 rport=36138 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765876152.659:14900): pid=82306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.20 addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765876154.391:14901): pid=82306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.20 addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876157.518:14902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876157.520:14903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876157.522:14904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876157.524:14905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876157.652:14906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765876157.751:14907): pid=82306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.20 addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876157.792:14908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876157.848:14909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876158.120:14910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876160.519:14911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876160.522:14912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876160.525:14913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876160.660:14914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876160.748:14915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876160.948:14916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765876161.454:14917): pid=82306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=82307 suid=74 rport=36138 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765876161.454:14918): pid=82306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=82307 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765876161.455:14919): pid=82306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=82306 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765876161.456:14920): pid=82306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765876162.243:14921): pid=82474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=82474 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765876162.351:14922): pid=82473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=82474 suid=74 rport=64268 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765876162.351:14923): pid=82473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=82474 suid=74 rport=64268 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765876163.011:14924): pid=82473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.20 addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765876166.376:14925): pid=82473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.20 addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876167.520:14926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876167.523:14927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876167.526:14928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876167.670:14929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876167.690:14930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876167.755:14931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765876169.747:14932): pid=82473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.20 addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765876173.089:14933): pid=82473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=82474 suid=74 rport=64268 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765876173.089:14934): pid=82473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=82474 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765876173.092:14935): pid=82473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=82473 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765876173.092:14936): pid=82473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876173.142:14937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876173.142:14938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765876173.217:14939): pid=82543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=82543 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765876173.325:14940): pid=82542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=82543 suid=74 rport=17866 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765876173.325:14941): pid=82542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=ecdh-sha2-nistp256 spid=82543 suid=74 rport=17866 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765876173.984:14942): pid=82542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.20 addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765876177.345:14943): pid=82542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.20 addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765876180.722:14944): pid=82542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.46.255.20 addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765876184.063:14945): pid=82542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=82543 suid=74 rport=17866 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765876184.064:14946): pid=82542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=82543 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1765876184.064:14947): pid=82542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=82542 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1765876184.064:14948): pid=82542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=193.46.255.20 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876188.529:14949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876188.532:14950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876188.536:14951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876188.539:14952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876188.635:14953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876188.821:14954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876188.842:14955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876189.084:14956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876191.524:14957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876191.527:14958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876191.530:14959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876191.760:14960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876191.782:14961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876191.839:14962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876198.523:14963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876198.526:14964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876198.529:14965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876198.650:14966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876198.698:14967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876198.824:14968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876219.522:14969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876219.526:14970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876219.529:14971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876219.533:14972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876219.646:14973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876219.752:14974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876219.863:14975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876220.037:14976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876222.518:14977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876222.519:14978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876222.521:14979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876222.676:14980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876222.699:14981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876222.793:14982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876229.524:14983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876229.527:14984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876229.532:14985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876229.665:14986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876229.761:14987): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876229.780:14988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876250.521:14989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876250.525:14990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876250.528:14991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876250.531:14992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876250.721:14993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876250.743:14994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876250.855:14995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876251.031:14996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876253.519:14997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876253.522:14998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876253.525:14999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876253.636:15000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876253.789:15001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876253.979:15002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876258.560:15003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876258.560:15004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876260.518:15005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876260.521:15006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876260.523:15007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876260.682:15008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876260.749:15009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876260.800:15010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876281.524:15011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876281.526:15012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876281.527:15013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876281.529:15014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876281.697:15015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876281.729:15016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876281.776:15017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876282.078:15018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876284.525:15019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876284.529:15020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876284.533:15021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876284.690:15022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876284.703:15023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876284.981:15024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876291.530:15025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876291.535:15026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876291.539:15027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876291.647:15028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876291.765:15029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876291.777:15030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876312.520:15031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876312.523:15032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876312.526:15033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876312.531:15034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876312.738:15035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876312.798:15036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876312.853:15037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876313.061:15038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876315.519:15039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876315.523:15040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876315.526:15041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876315.691:15042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876315.824:15043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876315.873:15044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876322.523:15045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876322.526:15046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876322.529:15047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876322.663:15048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876322.682:15049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876322.737:15050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876343.528:15051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876343.532:15052): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876343.537:15053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876343.541:15054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876343.577:15055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876343.577:15056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_virtqemud_recover comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876343.656:15057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876343.724:15058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876343.786:15059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876344.182:15060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876346.520:15061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876346.523:15062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876346.526:15063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876346.985:15064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876347.083:15065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876347.185:15066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876353.519:15067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876353.522:15068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876353.525:15069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876353.642:15070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876353.753:15071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876353.772:15072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765876357.789:15073): pid=83921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=83921 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765876357.792:15074): pid=83920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=83921 suid=74 rport=54878 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765876357.792:15075): pid=83920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=83921 suid=74 rport=54878 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765876357.995:15076): pid=83920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765876358.005:15077): pid=83920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765876358.005:15078): pid=83920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:29:9d:95:92:cc:83:72:06:42:ed:10:a4:bb:f5:f1:c1:fd:52:87:f6:ff:80:d7:0b:00:09:15:05:9a:b6:13:82 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765876358.033:15079): pid=83920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765876358.034:15080): pid=83920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=83921 suid=74 rport=54878 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765876358.036:15081): pid=83920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765876358.036:15082): pid=83920 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=21 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765876358.036:15082): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffd1bf3bd30 a2=4 a3=3e8 items=0 ppid=37368 pid=83920 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765876358.036:15082): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765876358.038:15083): pid=83920 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765876358.074:15084): pid=83920 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765876358.075:15085): pid=83924 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=83924 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1765876358.077:15086): pid=83924 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765876358.122:15087): pid=83920 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765876358.122:15088): pid=83920 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765876358.126:15089): pid=83920 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=83925 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765876358.195:15090): pid=83938 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765876358.196:15091): pid=83938 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D6875686E677466617A786B6D716B7A656B76686E687573767776756A7471786D203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765876358.198:15092): pid=83938 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765876358.203:15093): pid=83938 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765876358.984:15094): pid=83938 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765876358.984:15095): pid=83938 uid=1000 auid=1000 ses=21 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765876359.026:15096): pid=83920 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765876359.026:15097): pid=83920 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765876364.229:15098): pid=83920 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=83924 suid=1000 rport=54878 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765876364.229:15099): pid=83920 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=83924 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765876364.231:15100): pid=83920 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765876364.233:15101): pid=83920 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765876364.233:15102): pid=83920 uid=0 auid=1000 ses=21 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=83920 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1765876365.557:15103): pid=83944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=83944 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765876365.559:15104): pid=83943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=83944 suid=74 rport=45074 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765876365.559:15105): pid=83943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=83944 suid=74 rport=45074 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765876365.632:15106): pid=83943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765876365.645:15107): pid=83943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765876365.645:15108): pid=83943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:29:9d:95:92:cc:83:72:06:42:ed:10:a4:bb:f5:f1:c1:fd:52:87:f6:ff:80:d7:0b:00:09:15:05:9a:b6:13:82 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765876365.677:15109): pid=83943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765876365.678:15110): pid=83943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=83944 suid=74 rport=45074 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765876365.681:15111): pid=83943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765876365.682:15112): pid=83943 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=22 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765876365.682:15112): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffca81a34d0 a2=4 a3=3e8 items=0 ppid=37368 pid=83943 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765876365.682:15112): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765876365.683:15113): pid=83943 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765876365.715:15114): pid=83943 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765876365.716:15115): pid=83947 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=83947 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1765876365.718:15116): pid=83947 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765876365.762:15117): pid=83943 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765876365.762:15118): pid=83943 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765876365.765:15119): pid=83943 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=83948 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1765876365.835:15120): pid=83961 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765876365.836:15121): pid=83961 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D7770766A6C7272787875666165786A797673656B626A7863776A667766646D6C203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765876365.837:15122): pid=83961 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765876365.840:15123): pid=83961 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765876366.339:15124): pid=83961 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1765876366.340:15125): pid=83961 uid=1000 auid=1000 ses=22 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1765876366.343:15126): pid=83943 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1765876366.343:15127): pid=83943 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765876371.697:15128): pid=83943 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=83947 suid=1000 rport=45074 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765876371.697:15129): pid=83943 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=83947 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1765876371.700:15130): pid=83943 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1765876371.701:15131): pid=83943 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765876371.702:15132): pid=83943 uid=0 auid=1000 ses=22 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=83943 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1765876374.522:15133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876374.524:15134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876374.527:15135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876374.529:15136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876374.678:15137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2eca030d3fece65e328d2700dd1f8ceb92f78bec5b10eac805fb392d64b5f45e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876374.737:15138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7a32c110b56f21699d44fc9a02ca4f5dee9a2bc4236c8161f3cd289fd9f236a4 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876374.752:15139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=dbc504936d30b9b4010f13915d355e751eeb3773480ebc3af5ff2519f7cb17c5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876375.104:15140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e7baf2c73c45da4ff09ea82a67692ed0c3c9773c6feed563f8abb147bc87776 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876377.519:15141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876377.522:15142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876377.525:15143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876377.769:15144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=599aef535bd248b03235375818357100fd34779c58e26d7d55025dbc23415e4a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876377.819:15145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=2462b6d2688e25457ac7f2a48abc058ad64832672b6faeef1933418bfe024dc3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876377.933:15146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=37d57adb027fd560595bb8f79442e2183a355bf4af6a6a68bcb14e0c8877ba07 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765876384.359:15147): pid=84134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=84134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1765876384.361:15148): pid=84133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=84134 suid=74 rport=52700 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1765876384.361:15149): pid=84133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=84134 suid=74 rport=52700 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1765876384.435:15150): pid=84133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876384.436:15151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876384.439:15152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1765876384.442:15153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1765876384.448:15154): pid=84133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765876384.448:15155): pid=84133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:29:9d:95:92:cc:83:72:06:42:ed:10:a4:bb:f5:f1:c1:fd:52:87:f6:ff:80:d7:0b:00:09:15:05:9a:b6:13:82 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765876384.476:15156): pid=84133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1765876384.477:15157): pid=84133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=84134 suid=74 rport=52700 laddr=38.102.83.245 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1765876384.480:15158): pid=84133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1765876384.480:15159): pid=84133 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=23 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1765876384.480:15159): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffc6cbeadf0 a2=4 a3=3e8 items=0 ppid=37368 pid=84133 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1765876384.480:15159): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1765876384.481:15160): pid=84133 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1765876384.517:15161): pid=84133 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765876384.518:15162): pid=84169 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=84169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1765876384.520:15163): pid=84169 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1765876384.564:15164): pid=84133 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1765876384.564:15165): pid=84133 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1765876384.566:15166): pid=84133 uid=0 auid=1000 ses=23 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:0d:b1:4d:fa:b4:f6:d9:70:e7:0a:50:ec:26:cf:c8:56:79:47:8b:b2:44:2e:8d:25:17:60:8a:4a:ec:01:fb:9a direction=? spid=84183 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=SERVICE_STOP msg=audit(1765876384.607:15167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=93ada31cbb02ee1dabb4ee455d393ad6db182025d65856099c168b10db33174e comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1765876384.641:15168): pid=84183 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1765876384.642:15169): pid=84183 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=7273796E63202D2D736572766572202D2D73656E646572202D6C4C6F67447470727A652E4C73667843202E202F7661722F6C6F67 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1765876384.643:15170): pid=84183 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1765876384.648:15171): pid=84183 uid=1000 auid=1000 ses=23 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_STOP msg=audit(1765876384.653:15172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a1cc346e0cd46f5e4249b6e7bb2ba56421ad7ce0c8f39bc3e0f9dd817a0a286d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1765876384.782:15173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8e0058bdb7ae1aba8305287b8811070a45bb210fcca6293208c6fc4bda0f4ba0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"